Multinational Experiment 7 Cyber Domain Outcome 3. Cyber Situational Awareness. Limited Objective Experiment Report

Abstract : The MNE 7 Cyber Situational Awareness Limited Objective Experiment (LOE) was conducted from 29 October to 02 November 2012 in the Boeing Defence (UK) Portal facility, in Fleet, UK. The aim of the experiment was to test the proposition that situational awareness could be obtained from shared cyber information, that came from multiple different sources, and that such situational awareness provided significant benefits to the strategic level (senior government official, senior executive) decision maker. The experiment focused on what elements of cyber information gave value to the cyber situational awareness, the willingness of organisations to share such information and the associated mechanisms for doing so, and the most appropriate/efficient way to display the situational awareness for specific decision makers. In addition it was assumed that you are unable to protect against the first attack from any (malicious) source (zero-day attack). Therefore in order to reduce the risk in the time period between detecting that first attack and a solution to it being found, it was proposed that basic cyber information regarding the attack should be shared as rapidly and widely as possible. To this end the LOE was a test bed for sharing of information across industry sectors and government departments as well as national borders. The LOE was based on four Sector Nodes (Air Traffic Management, Power/Energy, Telecommunications and Defence) and a national Hub