Towards a Networks-of-Networks Framework for Cyber Security

TL;DR

This paper proposes a three-layered networks-of-networks model to better understand and monitor complex interdependent cyber systems, aiming to enhance security and mission assurance.

Contribution

It introduces a novel three-layered NoN framework tailored for enterprise cyber systems, expanding the application of NoN models in cybersecurity.

Findings

Demonstrates how the NoN model can be used for continuous system monitoring.

Shows the potential of NoN for improving mission assurance.

Provides in-depth discussion of four graph-theoretic applications.

Abstract

Networks-of-networks (NoN) is a graph-theoretic model of interdependent networks that have distinct dynamics at each network (layer). By adding special edges to represent relationships between nodes in different layers, NoN provides a unified mechanism to study interdependent systems intertwined in a complex relationship. While NoN based models have been proposed for cyber-physical systems, in this position paper we build towards a three-layered NoN model for an enterprise cyber system. Each layer captures a different facet of a cyber system. We present in-depth discussion for four major graph- theoretic applications to demonstrate how the three-layered NoN model can be leveraged for continuous system monitoring and mission assurance.