Military-Based Cyber Risk Assessment Framework for Supporting Cyber Warfare in Thailand

Abstract

Information Technology (IT) Risk Management is designed to confirm the sufficiency of information security. There are many risk management/assessment standards, e.g. IS0 27005:2011 and NIST SP 800-30rev1, which are mainly designed for general organizations such as governments or businesses. Cyber risk assessment focused on military strategy has been rarely studied. Hence, this paper presents an innovative cyber risk assessment conceptual framework named "Cyber Risk Assessment (CRA)" which is extended from previous work with Military Risk Evaluation (MRE). This proposed CRA is the collection and integration of both quantitative and qualitative data. The Vulnerability Detection (VD) tools in Network Risk Evaluation (the previous studies) were used for the quantitative data collection and the focus group in the MRE (the proposed method) was used to collect qualitative data, which enhance the general risk assessment standard to achieve the objective of the research. The complexity of cyberspace domains with a military perspective is thoughtfully contemplated into the cyber risk assessment for national cyber security. Results of the proposed framework enable the possibility of cyber risk evaluation into score for national cyber security planning.

A systematic review of cyber-resilience assessment frameworks

“…Cloud Based Univ Tech Sydney,AU [37] Optimization Bi-level MILP Hunan Univ,CN & Illinois Inst Tech,US [99]; New York Univ,USA [34] Markov chains -Dyn Prog Beijing Inst Tech,CN [117]; Univ Wisconsin,US & Univ Toledo,US & ATSEC Informat Secur Corp,US [114] Min-Max Multi-obj Queen Mary Univ London,UK [136] Parametric fb linearization Univ Toronto,CA [104] Semi-Definite Programming Univ Calif Berkeley,US & KTH Royal Inst Tech,SE [108] Stochastic model IBM Corp,US & Southern Method Univ, US [33] Qualitative Rational Choice perspective Temple Univ,US [63] Vulnerability detection Rangsit Univ,TH [52] Risk Assess.…”

Applying Empirical Thresholding Algorithm for a Keystroke Dynamics Based Authentication System

“…Due to the extended application of computers in financial, mechanical, military and individual exercises, a stringent framework to safeguard the storage of essential data has never been more imperative (Hemanidhi & Chimmanee, 2017;Hussien, Muda, & Yasin, 2018). Unauthorized access to log into secure systems can lead to significant financial misfortune, hence it is mandatory to construct high quality security measures in these computer networks (Mihajlov, Jerman-Blažič, & Ciunova Shuleska, 2016;Mohsin, Bakar, Hamdan, & Abdul, 2018).…”