CyMRisk: An approach for computing mission risk due to cyber attacks

This paper provides an overview of CyMRisk, an experimental architecture for computing mission risk due to cyber attack. In its current form, the approach employs a simulation of key aspects of a target business/mission process as well as attacker behavior to estimate mission impact due to cyber attacks. In addition, CyMRisk estimates worst case attacker level of effort associated with carrying out such attacks.