A Proof-of-Concept Model Demonstration of System Level Cyber Attacks on Availability

In this study we have modeled a cyber security situation and demonstrated the system level effects using system dynamics PoC (Proof-of-Concept) model. We modeled a hypothetical Company's Information Technology infrastructure and simulated a Distributed Denial-of-Service attack on one part of the system in an effort to see how other parts of the system were affected. To validate our simulation model, we developed a cybersecurity testbed and conducted a cyber-attack on one application and observed its impact on the whole system. The results indicate that by using known vulnerabilities and the current knowledge about infrastructure and security controls, the system dynamic cyber security simulation modeling allows an organization to imitate the attacker activities and helps to assess and mitigate the system's risk exposure.