Towards a theoretical framework for an active cyber situational awareness model

Abstract

While the mechanism and scope of cyberspace is progressing on a daily basis, risk factors and the ability to process cyberspace data in less time and using less effort are proving to be major roadblocks to achieve the desired outcomes. The defensive methods currently applied to counter these evolving attacks are not sufficient due to their preventive and reactive nature so an active posture is required. The passive natures of existing Situational Awareness (SA) models imply that they cannot enhance cyber SA in a world where there are new developments every day. The research activity in this paper focused on defining a new approach towards ensuring cyber security. We propose an Active Situational Awareness Model (ASAM) as a theoretical model that enhances the quality of cyber situational awareness. The model proposes a concept that conforms to the military stratagems of Sun Tzu, where operators always engage attackers directly by deploying active intelligence-gathering techniques in order to create new knowledge.