Cybersecurity Science with Shawn Riley

I. Introduction In the modern digital landscape, cybersecurity has become an essential concern for organizations across all sectors. The increasing sophistication of cyber threats necessitates robust and effective cybersecurity strategies. One such strategy is the Continuous Threat Exposure Management (CTEM) program. CTEM is a proactive, dynamic approach to cybersecurity that emphasizes the continuous identification, assessment, and mitigation of cyber threats. It underscores the need for ongoing vigilance and adaptation to an ever-evolving threat landscape. A critical component of CTEM programs is the understanding and application of a specific effects vocabulary. This vocabulary, as outlined in the NIST 800-160 vol 2 rev 1, provides a standardized language for cybersecurity professionals to articulate and evaluate the impact of their decisions on cyber adversaries. It consists of five high-level, desired effects on the adversary: redirect, preclude, impede, limit, and expose, and 14 ...

Today's experiment with ChatGPT4 was seeing how well it could support a creating a SKOS taxonomy from text I copy and pasted out of one of my Cybersecurity Science blogs, " A Standardized Vocabulary for Evaluating the Impact of Cyber Defense Decisions on Adversary Behavior " which contains an effects vocabulary from NIST 800-160 Vol 2 Rev 1 dated December 2021.  SKOS (Simple Knowledge Organization System) is a widely-used standard for representing knowledge organization systems, such as taxonomies, thesauri, and classification schemes. Here are some of the benefits of using SKOS: Interoperability : SKOS is a widely recognized and adopted standard, making it easy to share and exchange knowledge organization systems across different applications and platforms. This can improve interoperability and facilitate data integration and reuse. Consistency : SKOS provides a consistent way to represent knowledge organization systems, making it easier to manage and maintain them. This...

Introduction Cybersecurity science is a systematic approach to understanding, predicting, and managing cybersecurity risks. It encompasses a wide range of topics and methodologies, which are organized into seven core themes. In this article, we will dive into these themes, explore their interrelatedness, and discuss their importance to Chief Information Security Officers (CISOs) seeking to implement comprehensive security programs. Common Language The foundation of cybersecurity science lies in the establishment of a common language. This enables security professionals, including CISOs, to communicate effectively about security concepts, architectural components, and risk assessment results. A common language provides consistency and clarity, ensuring that all stakeholders have a shared understanding of the goals and challenges of a security program. Key aspects of a common language include: Terminology : Accurate and consistent definitions of security concepts. Visualization : Clear r...

In cybersecurity, effects refer to the desired outcomes or impacts on an adversary's behavior or actions that a defender wants to achieve through various measures. These effects can be used to shape an adversary's behavior, disrupt their activities, or limit their ability to achieve their objectives. Effects are important in cybersecurity because they help defenders to better understand the potential impact of their decisions and actions, as well as evaluate the effectiveness of their defensive measures. By defining and measuring the effects of their actions, defenders can make more informed decisions and adjust their strategies to better mitigate risks and protect their systems from cyber threats. Additionally, using a standardized vocabulary to describe effects can help improve communication and collaboration among cybersecurity professionals, as well as enable more evidence-based claims and hypotheses about the effectiveness of different defensive measures. Using a standardi...

Explanation of what data models are and why they are important Data models are representations of data that are used to organize, structure, and store information in a meaningful way. They provide a way to describe data in a format that can be easily understood and processed by both humans and machines. Data models are important because they enable us to: Organize complex data: As the amount and complexity of data grows, it becomes increasingly important to have a structured way of organizing it. Data models provide a way to break down data into manageable chunks and organize it in a logical way. Ensure data quality: Data models help to ensure that data is consistent and accurate. By defining rules and constraints for how data can be entered and stored, data models help to prevent errors and inconsistencies. Facilitate data integration: Data models provide a common language for different systems to communicate and share data. This makes it easier to integrate data from different source...