Cyber Resilience

• Main Author: Petrenko, Sergei
• Format: eBook
• Language: English
• Published: River Publishers 2020
• Subjects: Computing and Processing
• ISBN: 9788770221160; 8770221162
• DOI: 10.1201/9781003337775

Modern cyber systems acquire more emergent system properties, as far as their complexity increases: cyber resilience, controllability, self-organization, proactive cyber security and adaptability. Each of the listed properties is the subject of the cybernetics research and each subsequent feature ma...

Table of Contents:

• Foreword vii Preface xv Acknowledgements xvii List of Figures xix List of Tables xxix List of Abbreviations xxxi Glossary xxxix Introduction 1 1 Cyber Resilience Concept 7 1.1 Cyber Security Threat Landscape 8 1.1.1 APT Attack Research Results 8 1.1.2 Known Attacker Methods 17 1.1.3 Process Control System Cyber Security Threat 32 1.2 Problem of the "Digital Bombs" Neutralization 49 1.2.1 "Digital Bombs" Detection Problem 49 1.2.2 Program Faults Detection Methods 62 1.2.3 Introducing a Passport System for Programs 71 1.2.4 "Digital Bombs" Neutralization Method 86 1.3 Problem Statement of the Cyber Resilience Control 101 1.3.1 Basic Definitions and Concepts of the Cyber Resilience 101 1.3.2 Considering Trends and Prospects for Digital Transformation 115 1.3.3 Mathematical Formulation of the Cyber Resilience Control Problem 126 2 Cyber Risk Management 141 2.1 Best Practices of Cyber Risk Management 142 2.1.1 History of Cyber Risk Management Standards 142 2.1.2 Methodological Recommendations for the Cyber Risks Management 156 2.1.3 Method for Subjective Probability 169 2.2 Cyber Resiliency Metric Development 189 2.2.1 Possible Cyber Resiliency Metrics 189 2.2.2 Predicate Functions 203 2.2.3 Verification of Program Schemes 213 2.3 Examples of Cyber Risk Management 227 2.3.1 Example of Developing a Corporate Cyber Risk Management Methodology 227 2.3.2 BIA Example – Business Impact Analysis 235 2.3.3 Toolkit for Cyber Risk Control 256 3 Enterprise Cyber Resilience Program 271 3.1 Business Continuity Management 272 3.1.1 Business Continuity Management Practice 272 3.1.2 Main Stages of BCM Life Cycle 287 3.1.3 BCP/DRP Plan Development Recommendations 297 3.2 Business Resilience Project Management 315 3.2.1 Preparing a Business Resilience Project Plan 315 3.2.2 Development of Predictive Models 327 3.2.3 Development of the Dynamic Profiles 335 3.3 Creating a Cyber Resilient Infrastructure 352 3.3.1 Audit of Cyber Resilience Management System 352 3.3.2 Designing a Cyber-Resilient Infrastructure 369 3.3.3 Intellectual Cyber Resilience Orchestration 381 Conclusion 405 References 409 Index 441 About the Author 443