Cyber Fighter Associate: A Decision Support System for cyber agility

In the event of a cyber attack it is important for network defenders to make quick, informed decisions to secure assets. However, the human decision making process is slow and inefficient compared to the speed at which cyber operations can occur. The use of a decision support system (DSS) would help aid agility decisions to shorten the amount of time a network is insecure. In tactical military networks, such a DSS would need to consider constrained resources such as battery life and bandwidth as well as mission goals. In this paper we describe a DSS (Cyber Fighter Associate (CyFiA)) to help select agility maneuvers to contain and eliminate a malicious infection in a mobile ad hoc network (MANET). A variety of scenarios prioritizing factors such as node criticality, health, security and capability are employed. Our results show that CyFiA selects the best sequence of maneuvers for the scenarios and can reduce energy costs when securing a MANET.