Defensive Cyber Maneuvers to Disrupt Cyber Attackers

Abstract

Perimeter based defenses are limited in deterring and defeating cyberattacks. Multi-layered defenses with predictable effects are needed to provide robust cybersecurity against Advanced Persistent Threats. Cyber maneuver implements proactive defensive cyber actions to achieve positional or temporal advantages over an adversary in the cognitive, technical, and physical domains. However, understanding cognitive effects on adversaries is nascent. The paper describes application and results of an enhanced cyber maneuver framework designed to predict adversary behavioral and cognitive response to maneuvers. Results from remote pilot testing of cyber maneuvers including “herd/traffic slowing”, “deception”, and “stimulate a response/reset” are presented. The pilot study builds on prior research of in-lab experimentation of red teamer cognitive and behavioral response to cyber maneuvers and extends the testing method to remote configurations, enabling testing with a broader pool of participants. The framework and test methodology supports design and evaluation of cyber maneuvers' impact on attackers prior to deployment.