Studying resilient cyber incident management from large-scale cyber security training
Studying resilient cyber incident management from large-scale cyber security training
复制标题
从大规模网络安全培训中研究弹性网络事件管理
DOI：
10.1109/ascc.2015.7244713
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
K. Seki
中科院分区：
文献类型：
--
作者：
T. Aoyama;H. Naruoka;I. Koshijima;Wataru Machii;K. Seki
关于人类对网络复原力的贡献的研究是关键基础设施安全领域尚未探索的领域。到目前为止，网络弹性一直被认为是IT安全研究的延伸。当前的讨论重点是减轻网络安全风险的技术措施和政策准备。在这项基于人为因素的研究中，讨论了通过更好的管理来实现组织高弹性的方法。在ENCS（荷兰海牙欧洲网络安全网络）的大规模网络安全实践培训中进行了实地观察，以确定在现实世界的网络事件中可能发生的管理挑战。在本文中，扩展的可能性，以评估组织的行为在网络危机管理中的工程框架进行了讨论。
The study on human contribution to cyber resilience is unexplored terrain in the field of critical infrastructure security. So far cyber resilience has been discussed as an extension of the IT security research. The current discussion is focusing on technical measures and policy preparation to mitigate cyber security risks. In this human-factor based study, the methodology to achieve high resiliency of the organization by better management is discussed. A field observation was conducted in the large-scale cyber security hands-on training at ENCS (European Network for Cyber Security, The Hague, NL) to determine management challenges that could occur in a real-world cyber incident. In this paper, the possibility to extend resilience-engineering framework to assess organization's behavior in cyber crisis management is discussed.