For the purpose of effective cybersecurity prioritization under limited human, time, and financial resources at industrial critical infrastructure facilities, this study proposes the application of a symbiosis between the mathematical apparatus of simulation-analytical structural modeling using Colored Petri Nets and the assessment of adversary resource expenditures under uncertainty based on PERT analysis. This combination enables a formalized description of various cyberattack vectors and tactics, modeling the propagation trajectories of specialized technological Trojan malware, as well as quantitative calculation of the resource component required to implement each attack scenario against a technological system. The proposed method can be practically applied in the process of cyber-threat modeling, as it makes it possible to present their resource indicators in a format convenient for analytical evaluation. This creates a foundation for informed decision-making on cybersecurity measures by both managerial and operational levels of cybersecurity units. The approach allows calculating the necessary resource expenditures both from the adversary’s perspective and that of the defens
📖 افتح في inklap 🔗 DOI 📮 اطلب بحثاً