Check your blind spot: a new cyber-security metric for measuring incident response readiness

Benjamin Aziz; Ali Malik; Jeyong  Jung

doi:10.1007/978-3-319-57858-3_3

Check your blind spot: a new cyber-security metric for measuring incident response readiness

Benjamin Aziz, Ali Malik, Jeyong Jung

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

This paper presents some ideas on defining and implementing a new Cyber-security risk metric for measuring the readiness of organisations, in terms of the availability of their resources, in dealing with new attack incidents launched against their infrastructures whilst recovering from ongoing incidents. Our new metric, the Mean Blind Spot, is defined as the average interval between the recovery time of an existing incident and the occurrence time of a new incident. It is therefore designed to capture those time intervals where the organisation is most vulnerable due to possible lack of available resources. We present an approach for implementing our new metric using open data on security incidents available from the VERIS community dataset.

Original language	English
Title of host publication	Risk Assessment and Risk-Driven Quality Assurance: 4th International Workshop, RISK
Place of Publication	Graz, Austria
Publisher	Springer
DOIs	https://doi.org/10.1007/978-3-319-57858-3_3
Publication status	Published - 2017
Externally published	Yes
Event	Risk Assessment and Risk-Driven Quality Assurance: 4th International Workshop, RISK 2016, Held in Conjunction with ICTSS 2016, Graz, Austria, October 18, 2016, Revised Selected Papers 4 - Graz, Austria Duration: 18 Oct 2016 → … https://link.springer.com/book/10.1007/978-3-319-57858-3

Conference

Conference	Risk Assessment and Risk-Driven Quality Assurance: 4th International Workshop, RISK 2016, Held in Conjunction with ICTSS 2016, Graz, Austria, October 18, 2016, Revised Selected Papers 4
Abbreviated title	RISK
Country/Territory	Austria
City	Graz
Period	18/10/16 → …
Internet address	https://link.springer.com/book/10.1007/978-3-319-57858-3

Access to Document

10.1007/978-3-319-57858-3_3

https://link.springer.com/chapter/10.1007/978-3-319-57858-3_3

Cite this

@inproceedings{a95ed6676c6d4835a0834e9b6d1ea829,

title = "Check your blind spot: a new cyber-security metric for measuring incident response readiness",

abstract = "This paper presents some ideas on defining and implementing a new Cyber-security risk metric for measuring the readiness of organisations, in terms of the availability of their resources, in dealing with new attack incidents launched against their infrastructures whilst recovering from ongoing incidents. Our new metric, the Mean Blind Spot, is defined as the average interval between the recovery time of an existing incident and the occurrence time of a new incident. It is therefore designed to capture those time intervals where the organisation is most vulnerable due to possible lack of available resources. We present an approach for implementing our new metric using open data on security incidents available from the VERIS community dataset.",

author = "Benjamin Aziz and Ali Malik and Jeyong Jung",

year = "2017",

doi = "10.1007/978-3-319-57858-3\_3",

language = "English",

booktitle = "Risk Assessment and Risk-Driven Quality Assurance: 4th International Workshop, RISK",

publisher = "Springer",

note = "Risk Assessment and Risk-Driven Quality Assurance: 4th International Workshop, RISK 2016, Held in Conjunction with ICTSS 2016, Graz, Austria, October 18, 2016, Revised Selected Papers 4 ; Conference date: 18-10-2016",

url = "https://link.springer.com/book/10.1007/978-3-319-57858-3",

}

Aziz, B, Malik, A & Jung , J 2017, Check your blind spot: a new cyber-security metric for measuring incident response readiness. in Risk Assessment and Risk-Driven Quality Assurance: 4th International Workshop, RISK. Springer, Graz, Austria, Risk Assessment and Risk-Driven Quality Assurance: 4th International Workshop, RISK 2016, Held in Conjunction with ICTSS 2016, Graz, Austria, October 18, 2016, Revised Selected Papers 4, Graz, Austria, 18/10/16. https://doi.org/10.1007/978-3-319-57858-3_3

TY - GEN

T1 - Check your blind spot: a new cyber-security metric for measuring incident response readiness

AU - Aziz, Benjamin

AU - Malik, Ali

AU - Jung , Jeyong

PY - 2017

Y1 - 2017

N2 - This paper presents some ideas on defining and implementing a new Cyber-security risk metric for measuring the readiness of organisations, in terms of the availability of their resources, in dealing with new attack incidents launched against their infrastructures whilst recovering from ongoing incidents. Our new metric, the Mean Blind Spot, is defined as the average interval between the recovery time of an existing incident and the occurrence time of a new incident. It is therefore designed to capture those time intervals where the organisation is most vulnerable due to possible lack of available resources. We present an approach for implementing our new metric using open data on security incidents available from the VERIS community dataset.

AB - This paper presents some ideas on defining and implementing a new Cyber-security risk metric for measuring the readiness of organisations, in terms of the availability of their resources, in dealing with new attack incidents launched against their infrastructures whilst recovering from ongoing incidents. Our new metric, the Mean Blind Spot, is defined as the average interval between the recovery time of an existing incident and the occurrence time of a new incident. It is therefore designed to capture those time intervals where the organisation is most vulnerable due to possible lack of available resources. We present an approach for implementing our new metric using open data on security incidents available from the VERIS community dataset.

U2 - 10.1007/978-3-319-57858-3_3

DO - 10.1007/978-3-319-57858-3_3

M3 - Conference contribution

BT - Risk Assessment and Risk-Driven Quality Assurance: 4th International Workshop, RISK

PB - Springer

CY - Graz, Austria

T2 - Risk Assessment and Risk-Driven Quality Assurance: 4th International Workshop, RISK 2016, Held in Conjunction with ICTSS 2016, Graz, Austria, October 18, 2016, Revised Selected Papers 4

Y2 - 18 October 2016

ER -

Check your blind spot: a new cyber-security metric for measuring incident response readiness

Abstract

Conference

Access to Document

Fingerprint

Cite this