Cyber SA: Situational Awareness for Cyber Defense

Author(s):  
Paul Barford ◽  
Marc Dacier ◽  
Thomas G. Dietterich ◽  
Matt Fredrikson ◽  
Jon Giffin ◽  
...  
Author(s):  
Gabriel Klein ◽  
Simon Hunke ◽  
Heiko Günther ◽  
Marko Jahnke

Author(s):  
Gabriel Klein ◽  
Simon Hunke ◽  
Heiko Günther ◽  
Marko Jahnke

2021 ◽  
Author(s):  
Torvald F. Ask ◽  
Benjamin J. Knox ◽  
Ricardo Lugo ◽  
Lukas Hoffmann ◽  
Stefan Sütterlin

In cyber threat situations, the establishment of a shared situational awareness as a basis for cyber defense decision-making results from adequate communication of a Recognized Cyber Picture (RCP). RCPs consist of actively selected information and have the goal of accurately presenting the severity and potential consequences of the situation. RCPs must be communicated between individuals, but also between organizations, and often from technical to non-/less technical personnel. The communication of RCPs is subject to many challenges that may affect the transfer of critical information between individuals. There are currently no common best practices for training communication for shared situational awareness among cyber defense personnel. The Orient, Locate, Bridge (OLB) model is a pedagogic tool to improve communication between individuals during a cyber threat situation. According to the model, an individual must apply meta-cognitive awareness (O), perspective taking (L), and communication skills (B) to successfully communicate the RCP. Gamification (applying game elements to non-game contexts) has shown promise as an approach to learning. We propose a novel OLB-based Gamification design to improve dyadic communication for shared situational awareness among (technical and non-technical) individuals during a cyber threat situation. The design includes the Gamification elements of narrative, scoring, feedback, and judgment of self. The proposed concept contributes to the educational development of cyber operators from both military and civilian organizations responsible for defending and securing digital infrastructure. This is achieved by combining the elements of a novel communication model with gamification in a context in urgent need for educational input.


Author(s):  
Anita D'Amico ◽  
Kirsten Whitley ◽  
Daniel Tesone ◽  
Brianne O'Brien ◽  
Emilie Roth

A Cognitive Task Analysis (CTA) was performed to investigate the workflow, decision processes, and cognitive demands of information assurance (IA) analysts responsible for defending against attacks on critical computer networks. We interviewed and observed 41 IA analysts responsible for various aspects of cyber defense in seven organizations within the US Department of Defense (DOD) and industry. Results are presented as workflows of the analytical process and as attribute tables including analyst goals, decisions, required knowledge, and obstacles to successful performance. We discuss how IA analysts progress through three stages of situational awareness and how visual representations are likely to facilitate cyber defense situational awareness.


Sign in / Sign up

Export Citation Format

Share Document