Initial proposal of a framework in the context of cyberdefense to articulate controls and metrics associated
Pablo Gastón Sack, Jorge Salvador Ierache · 2015
This paper provides a group of definitions, documents, metrics and framework from different authors and sources in order to state a model of framework linking the security controls upon the basis of the referenced documents as a result of the research. It is a proposal to attain a series of progressive goals starting from a basic goal of introducing the cyberspace topic, cyber warfare and cyber defense. Satisfied the first goal we move into the universe of cyber defense, specifically in security controls where the most important and complete documents referring this topic were selected. This research will be used for making a large database containing the security controls specified in each document. As a next goal, the security controls are complemented by an additional research of security metrics that will provide the necessary tools to measure performance of each security control. These metrics will allow the assignment of a score which will be used in a table of equivalence proposed by the authors in order to standardize all units of measurement into a single measure. The ultimate goal will be to use this unique measure obtained of each metric to generate an initial proposal for a framework that facilitates the management and diagnosis of security in the context of cyber defense.