Turing assessor: a new tool for cyber security quantification

In this paper, a novel system level methodology for evaluating functionalities of network systems within general security model is introduced and formalized. We first decompose the entire system into a collection of subsystems each associated with a functionality. Thereafter, a new model for evaluating security properties of individual subsystem is built, which intends to implement a functionality by allowing an adversary to learn information and obtain knowledge from the correspondent subsystem via oracle queries. We further define evaluation and security metrics for security qualifications which is shown to be complete and robust within our model