Cyber Security and Resilience of Modern Societies: A Research Management Architecture

Abstract

Advanced information and communications technologies (ICT) facilitate the increase of effectiveness and efficiency of defence and security organizations, governmental services, the economy, and quality of life, while at the same time providing opportunities for malicious actors to cause significant damage without exercising physical coercion. Policies for security and resilience of modern societies to threats and risks from the cyberspace account for foreseen cyber threats, their immediate impact on ICT infrastructure, consequent effects on critical services, as well as cascading effects across systems and infrastructures. This paper presents the architecture used to plan and, consequently, manage cybersecurity research in Bulgaria. It covers five application areas (information management systems; industrial control systems; unmanned and remotely piloted vehicles; bio-integrated systems; and cognitive processes and decision-making), the study of systems of systems, and support to the formulation and implementation of cybersecurity policy.

Digital resilience framework for managing crisis: A qualitative study in the higher education and research sector

“…Qualitative research emphasizes meanings in context (Anderson & Poole, 2009) and is typically used for the investigation of complex phenomena. Exploring digital resilience strategies to address cyber security issues in major crises is complicated because (1) The literature points out that exploring strategies for cybercrimes is a complex phenomenon (Maleh, 2018), and (2) Investigating strategies for cybersecurity challenges requires a wide-ranging knowledge of cybersecurity challenges in the organization (Tagarev et al, 2017).…”

Unified IT&OT Modeling for Cybersecurity Analysis of Cyber-Physical Systems

“…Cyber-Physical Systems (CPSs) are systems that integrate computation, communication, and controlling capabilities of Information and Communication Technology (ICT), with the traditional infrastructures. This integration facilitates the monitoring and controlling of objects in the physical world as one of the essential requirements of different Critical Infrastructures (CIs), such as manufacturing, healthcare, transportation and the energy sector, to name a few [1], [2]. However, this integration has significantly increased the number of connections among the system components, and this in turn has expanded the attack surface of CIs and has led to making possible complex cyber, and cyber-physical attacks such as Stuxnet and the attacks against the Ukraine's power grid [3].…”

MonSys: A Scalable Platform for Monitoring Digital Services Availability, Threat Intelligence and Cyber Resilience Situational Awareness

“…1,2 Although ICT increases the efficiency and effectiveness of various services and industries, in the meantime, it provides opportunities for malicious actors to cause significant damage without exercising physical coercion. 3,4,5 Among the core values of a digitized society are its interconnectivity and reliability. 6,7 This ultimately leads to interdependence between economic sectors and to an amalgamation between the digital and analogue business operation, while in the meantime allowing for an ever-growing attack surface.…”