Engineering Trustworthy Systems: Get Cybersecurity Design Right the First Time

CHAPTER

23   Command and Control: What to Do About Attacks

Overview

•   23.1 The Nature of Control

•   23.1.1 Decision Cycle

•   23.1.2 Speed Considerations

•   23.1.3 Hybrid Control

•   23.2 Strategy: Acquiring Knowledge

•   23.2.1 Analogy

•   23.2.2 Direct Experience

•   23.2.3 Vicarious Experience

•   23.2.4 Simulation

•   23.3 Playbooks

•   23.3.1 Game Theory

•   23.3.2 Courses of Action in Advance

•   23.3.3 Criteria for Choosing Best Action

•   23.3.4 Planning Limitations

•   23.4 Autonomic Control

•   23.4.1 Control Theory

•   23.4.2 Role of Autonomic Control

•   23.4.3 Autonomic Action Palette

•   23.5 Meta-Strategy

•   23.5.1 Don’t Overreact

•   23.5.2 Don’t Be Predictable

•   23.5.3 Stay Ahead of the Attackers

Learning Objectives