TTP-Based Cyber Resilience Index: A Probabilistic Quantitative Approach to Measure Defence Effectiveness Against Cyber Attacks

arXiv:2406.19374v1 Announce Type: new
Abstract: In the dynamic cyber threat landscape, effective decision-making under uncertainty is crucial for maintaining robust information security. This paper introduces the Cyber Resilience Index (CRI), a TTP-based probabilistic approach to quantifying an organisation's defence effectiveness against cyber-attacks (campaigns). Building upon the Threat-Intelligence Based Security Assessment (TIBSA) methodology, we present a mathematical model that translates complex threat intelligence into an actionable, unified metric similar to a stock market index, that executives can understand and interact with …

arxiv attacks building campaigns cri cs.cr cyber cyber attacks cyber resilience cyber threat cyber threat landscape decision defence dynamic index information information security landscape making measure organisation quantitative resilience security threat threat landscape ttp uncertainty under