Using systems thinking to model cyber defence strategies within the UK ecosystem

使用系统思维对英国生态系统内的网络防御策略进行建模

• 批准号: 2742656
• 金额: --
• 依托单位: Royal Holloway University of London
• 依托单位国家: 英国
• 项目类别: Studentship
• 财政年份: 2019
• 资助国家: 英国
• 起止时间: 2019 至 无数据
• 项目状态: 未结题
• 来源: https://gtr.ukri.org/projects?ref=studentship-2742656
• 关键词: Using; systems; thinking; model; cyber

The PhD journey started from trying to understand the strategic approach which is used in order to engage with the complexity of the cyber domain. This journey led to deterrence theory within international relations literatures, however, subsequently the deterrence approach was found to be highly dependent on domains which did not possess the same crucial components, specifically: the large part played by the private sector; highly networked interaction; and low threshold interactions.This PhD aims to address some of these issues in order to better frame the area which is more aligned to the specificities of the cyber domain as opposed to frameworks taken from other areas. This will allow decision makers to be better informed when dealing with the cyber domain and discussing this area. This approach within cyber strategic studies research is at an early stage within the literatures which makes the potential of pushing forward in this area highly interesting.The PhD comprises a three-step process:1. Model Fundamentals: The first step is to create a model in order to represent the dynamics of the cyber domain. Through literatures and discussions, and using systems thinking, it is determined which drivers should be used in the modelling process and how this should be represented. After the model has been developed the drivers and assumptions used are validated though the use of experts. 2. Scenario development phase: At the next step, the outputs of the model are translated into a format suitable for dissemination and discussion within semi structured interviews. This is the process where it is decided what is the optimum format to allow information to be accessible whilst also providing participants to interact and influence decisions on the inputs (and thus outputs) of the model. 3. Semi-structured interview process: Using the scenarios created within the modelling process and the visualisations created from this, these are tested across different sectors in order to see how various stakeholders engage. This will be done in two parts: Case study exploration: Engagement will first be with stakeholders who know and understand either the cyber domain and/or modelling with iterations of this process, along with integrating learnings. Validation of learning: Using potentially updated modelling and visualisations engagement the second part of the interview process will be with decision makers. These participants are likely to have less knowledge of the cyber and/or modelling fields. The aim here is to get feedback on the usefulness of the approach and what learnings they may have taken away from.

博士之旅始于试图理解用于处理网络领域复杂性的战略方法。这一旅程导致了国际关系文献中的威慑理论，然而，随后发现威慑方法高度依赖于不具有相同关键组成部分的领域，特别是：私营部门发挥的很大作用；高度网络化互动；以及低阈值的相互作用。本博士旨在解决其中的一些问题，以便更好地构建更符合网络领域特殊性的领域，而不是从其他领域获取框架。这将使决策者在处理网络领域和讨论这一领域时能够更好地了解情况。网络战略研究中的这种方法在文献中处于早期阶段，这使得在该领域推进的潜力非常有趣。博士学位包括三个步骤：1。模型基础：第一步是创建一个模型，以表示网络领域的动态。通过文献和讨论，并使用系统思维，确定在建模过程中应该使用哪些驱动因素，以及如何表示这些驱动因素。在模型被开发出来之后，通过使用专家来验证所使用的驱动因素和假设。2. 情景开发阶段：在下一步，将模型的输出转换为适合在半结构化访谈中传播和讨论的格式。在这个过程中，决定什么是允许信息可访问的最佳格式，同时也使参与者能够对模型的输入（从而输出）进行交互并影响决策。3. 半结构化面试过程：使用建模过程中创建的场景和由此创建的可视化，这些场景在不同部门进行测试，以了解不同利益相关者的参与情况。案例研究探索：首先与了解和理解网络领域和/或建模的利益相关者进行接触，并通过此过程的迭代，以及整合学习。学习的验证：使用可能更新的建模和可视化参与，面试过程的第二部分将与决策者进行。这些参与者对网络和/或建模领域的了解可能较少。这里的目的是获得关于方法有用性的反馈，以及他们可能从中学到的东西。