×C8. Simulation-based analysis for cybersecurity decision-making

In the current era, the scale of Internet-connected systems has increased considerably, and these systems are being exposed to cyberattacks more than ever. The complexity of cyberattacks requires cybersecurity decision-making to be more dynamic and responsive. Simulation is a powerful tool that can significantly enhance the effectiveness of decision-makers in cybersecurity systems. Simulation facilitates replicating the environment, evaluation, risk analysis and assessment, and modeling. It helps proactive engagement with challenging decision making problems including identifying threats, adopting on time and effective defenses, and mitigating cybersecurity risks.

Alongside traditional simulation techniques including agent-based, discrete event and system dynamics models which are capable of modeling and anlysing the intricate relationships and uncertainties associated with cybersecurity systems, the state-of-the-art technologies like digital twins, data-driven cybersecurity models, machine learning-based security methods, and reinforcement learning (RL)-based game theory simulations can help improve the effectiveness of cybersecurity systems using data and simulations. For example, digital twins can provide a real-time virtual environment to simulate and test all possible scenarios of how a hacker might try to breach into a Critical Infrastructure resulting in faster and more efficient defense decisions.

The goal of this session is to bring recent theoretical and applied developments in simulation modeling and their intersections with cybersecurity decision-making. Papers are invited in, but are not limited to, the following topics:

Key topics: Emerging technologies including digital twins, machine learning, and RL-based game theory simulations in cybersecurity, System dynamics, agent-based, and discrete event simulation models in cybersecurity, Other decision-making support techniques (e.g., optimisation, simulation-based optimisation) in cybersecurity