Bannar

A combination of cyber technological feasibility and economic viability drives many of the decisions related to cybersecurity by both the defenders and attackers. In this context, technological feasibility is defined as any cyber resiliency technology that has the potential to be developed, fielded, and operationally controlled. In the case of economic viability, the resources required to defend or attack must be available. We define resources in its broadest sense to include but not limited to the people, equipment, training, required funding, and asset value. On the defensive side, these technological and economic factors determine the cyber security and resiliency policies, procedure and technologies implemented to prevent and respond to cyber-attacks. On the offensive side, they not only determines the type of attack but also the effort expended to ensure its success. In short, these and other factors determine the asymmetric balance between the attackers and defenders.


The CRE18 Workshop on Cyber Resilience Technologies, Benefits and Measurements will explore foundational and applied advances in cyber resiliency policies and technologies to achieve an asymmetric balance, and identify and quantify the effect economics has on the decision process. To do so, the workshop will seek to understand the capabilities, strengths/weaknesses, and benefits of various resiliency technologies. In addition it will attempt to address the metrics needed to measure their technical and economic effectiveness in addressing the asymmetric disparity between defender and attacker. The workshop will examine the parameters needed to accurately quantify asymmetric imbalance from both the offensive and defensive perspective; examine technical and non-technical approaches to shifting that balance, including the full range of costs/benefits of each approach; and explore and evaluate a range of options for defining and achieving optimality. It will bring together a diverse group of experts from multiple fields to advance the concepts, analysis and application of cost, value, risk and other important features of cyber systems as related to asymmetric advantage and cyber resiliency. This will serve to accelerate the recognition, adoption and application of cyber resilience within industry, government and academia by addressing the key concerns of how these techniques and technologies can be realized within the practical constraints of cost, risk, and benefit.


The topics of interest include, but are not limited to:


  • Cyber Resiliency technologies
  • Benefits and weaknesses of cyber resiliency technologies
  • Foundations of asymmetric cyber advantage
  • Integrated analyses of cyber resiliency & asymmetry with cyber environments
  • Metrics, measures, and economics of cyber resiliency & asymmetry
  • Policies and procedures related to the development, deployment and use of cyber resiliency technologies
  • Defining practical cyber resiliency
  • Technical & architectural approaches to gaining asymmetric advantage
  • Relationship between resiliency and security
  • Adversary economics: assessing the impact of defender capabilities and actions to the attacker
  • Frameworks for ROI analysis (cost, risk, benefit) to guide technology investment (research, development, and utilization)
  • Cyber-resiliency related tools that are guided by economic factors for defender and/or adversary
  • Use cases or case studies for defender and/or adversary that include economic factors

Cyber resiliency is applicable across the entire software architecture and how that architecture is implemented. As a result, this workshop is interested in the above topics as they relate across the entire software stack for both Information Technology (IT) and Operational Technology (OT).


Conference Companion


Accepted workshop papers will appear in the QRS 2018 conference companion which will be published by IEEE Computer Society Conference Publishing Services (CPS). Papers presented at the conference will also be submitted for inclusion into the IEEE Xplore and to all of the A&I (abstracting and indexing) partners (such as the Ei Compendex).

Authors may also choose to publish their papers in an Ei-indexed journal–International Journal of Performability Engineering (IJPE; http://www.ijpe-online.com).


Journal Special Issue (TBA)




Best Paper Award


At least one award will be presented. Authors will receive a certificate signed by the President of the IEEE Reliability Society and the Organizers of CRE 2018.

Panelists Solicitation (TBA)



Important Dates


    April 15, 2018       Submission deadline
    May 15, 2018       Author notification
    June 1, 2018       Camera-ready dues
    July 16-20, 2018       Workshop

Submission


Authors are invited to submit original, unpublished research papers as well as industrial practice papers. Simultaneous submissions to other publications and conferences are not permitted. Detailed instructions for electronic paper submission, panel proposals and review process can be found at http://paris.utdallas.edu/qrs18/submission.html.


The length of a camera ready paper will be limited to eight pages, including the title of the paper, the name and affiliation of each author, a 150-word abstract, and up to 6 keywords.


Authors must follow the IEEE Computer Society Press Proceedings Author Guidelines to prepare papers. At least one of the authors of each accepted paper is required to pay full registration fee and present the paper at the workshop. Arrangements are being made to publish selected accepted papers in reputable journals. The submissions must be in PDF and uploaded to the conference submission site.



  Click here to submit your papers to CRE 2018

Program Chairs


Nick Multari Pacific Northwest National Laboratory USA
Jeffrey Picciotto MITRE Corp USA

Steering Committee


Christopher Oehmen Pacific Northwest National Laboratory USA
Rosalie McQuaid MITRE Corp USA
Tyler Moore University of Tulsa USA
Abhishek Somani Pacific Northwest National Laboratory USA

Program Committee (TBA)


Michael Atifhetchi Raytheon Corp, BBN USA
Steve Borbash US Department of Defense USA
Eric Burger Georgetown University USA
Thomas Carroll Pacific Northwest National Lab USA
Andrea Ceccarelli Universita degli Studi di Firenze Italy
Peter Chen Carnegie Mellon Univ/SEI USA
Yung Ryn Choe Sandia National Lab USA
Robert Cunningham MIT Lincoln Labs USA
James Davis Iowa State University USA
Herve Debar Telecom SudParis France
Sabrina De Capitani di Vimercati Universita degli Studi di Milano Italy
Erich Devendorf Air Force Research Lab USA
Arlette Hart Federal Bureau of Investigations USA
Chad Heitzenrater Air Force Research Lab USA
Doug Jacobson Iowa State University USA
Dong Seong Kim University of Canterbury New Zealand
Volkmar Lotz SAP France
Emil Lupu Imperial University UK
Al Mok University of Texas at Austin USA
Takashi Nanya University of Tokyo Japan
Nuno Neves University of Lisbon Portugal
Mohammad Rahman Tennessee Tech USA
Craig Rieger Idaho National Lab USA
Luigi Romano University of Naples Italy
O. Sami Saydjari Cyber Defense Agency USA
Nabil Schear MIT Lincoln Labs USA
Neeraj Suri Technical University Darmstadt German
Kishor S. Trivedi Duke University USA
Marco Vieira Univ. of Coimbra Portugal
Paulo Verissimo University of Luxembourg Luxumbourg
Chris Walter WW Technology Group USA

Web Masters


Shou-Yu Lee University of Texas at Dallas USA
Xuelin Li University of Texas at Dallas USA


PC Login


Please click here to log in your PC account for CRE 2018.



Workshop Venue


CRE 2018 will be held in conjunction with QRS 2018 at Lisbon, Portugal. Please visit the QRS 18 website for further information.



General Inquiries


For more detailed and updated information, please contact Dr. Nick Multari at nick.multari@pnnl.gov or Mr. Jeffrey Picciotto at jp@mitre.org.



Previous CRE



CRE 2018 Program (TBA)