Rationality Validation of a Layered Decision Model for Network Defense

There are at least three key decision layers in cost-effective network defense to counter immediate threats: security policies, defense strategies, and real-time defense tactics. A layered decision model (LDM) has been developed to capture the essence of this decision process. The LDM helps decision-makers gain insight into the hierarchical relationships among interconnected entities and decision types that underlie defense goals, and supports the selection of cost-effective defense mechanisms to safeguard computer networks. To be effective as a business tool, it is necessary to validate the rationality of the model before applying it to real-world business cases. LDM rationality requires that a decision making process be consistent and free of blocked execution paths, and be able to produce cost-effective defense plans. This paper describes validation of LDM rationality.