Multi-Metric Fusion Based Quantitative Analysis Method for Comprehensive Cyber Resilience

The growing complexity of cybersecurity systems and the escalating severity of security threats have rendered the concept of traditional absolute security impractical. As an alternative paradigm, cyber resilience has emerged as a critical issue which focus on ensuring business continuity and system availability. At the meantime, researches on quantitative evaluation of cyber resilience also attract worldwide attention. This paper proposes a quantitative multi-metric fusion method for comprehensive cyber resilience evaluation, which integrates multiple key performance metrics to provide a comprehensive evaluation. Specifically, multiple metrics are measured separately under various perturbations, and then the entropy weight method is used to determine the weight of each metric. Additionally, a revised 2-additive fuzzy measures method is proposed to figure out the interactions among different metrics. The resilience value of each metric is quantified by the area under the curve (AUC) method. Finally, fuzzy integration is applied to synthesize these values into a comprehensive cyber resilience score. The proposed method is executed on a Web server system to analyze its comprehensive cyber resilience across distinct perturbation scenarios. Experimental results demonstrate that the proposed method not only accurately captures the comprehensive cyber resilience across several individual dimensions, but also effectively reveals the complex effects of multi-dimensional interactions on the comprehensive cyber resilience.