Preliminary Research Investigation Report – Remediation Cost Factors List

PDF

Authors
  1. Montuno, D. Y.
Corporate Authors
Defence Research and Development Canada, Ottawa Research Centre, Ottawa ON (CAN);Solana Networks - Ottawa, ON (CAN)
Abstract
Remediation activities occupy a significant amount of time for network defenders. In order to effectively manage those activities, network defenders need tools and methodologies to assist them. One approach that could help network defenders in that effort is to assign cost measures to remediation activities. Determining such a cost measure is not trivial, and researchers have suggested methodologies which require knowledge of the factors that influence the cost of remediation. Unfortunately, there is no exhaustive list of such cost factors. Through a task by Defence Research and Development Canada (DRDC)’s Cyber Decision Making and Response (CDMR) project, this report documents our research efforts in determining an exhaustive list of factors that could influence remediation costs. Our sources of information are publicly available literature as well as our experiential knowledge in cyber security. We further suggest techniques that could be used to aggregate the cost factors into cost measures that could be used by defenders in prioritizing network defence activities. We further propose ways of validating those proposed measures. As recommendations for next steps, we suggest further research be carried out on algorithms that contextually aggregate relevant factors to provide dynamic and missions-relevant cost measures, which are important for applications within the Canadian Armed Forces (CAF).

Il y a un résumé en français ici.

Keywords
Cyber Security;Cyber Decision Making
Report Number
DRDC-RDDC-2019-C029 — Contract Report
Date of publication
01 Feb 2019
Number of Pages
117
DSTKIM No
CA048826
CANDIS No
809595
Format(s):
Electronic Document(PDF)

Permanent link

Document 1 of 1

Date modified: