On faculty at Information Resources Management College National Defense University (students are LtCol, Col and General Officers)IRMC was 1st college in world University umbrella dedicated to the study of IT and all aspects. Now UC Berkeley, Syracuse, and Penn State. Run DoD’s Information Warfare program, 1st grads in 1995, now integrated with NWC and ICAF programs One of National Security Agency’s “Center of Academic Excellence” in Information Assurance. Students receive NSA approved 4011 certificate. Now setting up (about 50% complete) “Silicon Curtain” Simulation Lab. Test bed for running and testing InfoSec simulations. The Information Resources Management (IRM) College prepares leaders to direct the information component of national power by leveraging information and information technology for strategic advantage. Primary areas of concentration include business process reengineering, IRM law and policy, information technology, information security, management of acquisition processes  IRMC Courses free to National Security Agencies, low cost to other Feds, open on limited basis to private sector

what simulations are out there -  Primary focus –, how have they worked out? Will Show you some of them Issues with simulation will rise as we review the experience of others in using them – cost, learning curves, level of detail General break out of types of simulations along tool lines – network modeling tools, management flight simulators, etc Would certainly be thrilled to hear about any efforts within your organizations in this arena

Key work here is SYSTEM. Modeling is about understanding systems - how does this thing work, what are all the components, how do they fit together, what feedback mechanism are in place. Symbolic modeling maybe something like predicate calculus [John ?? At University of Tulsa] or state space/Petri Net [Moitra&Konda at Carnegie Mellon Univ] modeling which utilizes a specific set of symbols to represent ideas about objects, time, sets, and ways to manipulate them

Security models typically not used for “optimization” although can be. More often used for configuration, testing, learning

As a sideline, although not a simulation tool, simple network diagramming can certainly be a low cost start to better understanding your system through a pictoral model. Use echo/ping  to establish segments, equipment types

A few "specialized" rules are added to the usual game of Chess to simulate some of the characteristics of Information Operations such as  mutually supported by intelligence, to deny information to, influence, degrade, or destroy adversary command and control capabilities.“

Talk about Sectors –point out elements  Dig Down Capability, contrast to “canned” approach

Validation important but process of building the model is equally important – to overcome the blind men and elephant syndrome

2. Presidents Commission on Critical Infrastructure Protection (PCCIP) Strategic Simulation created by Booz, Allen, & Hamilton [Critical, 1997], 5. Dark Winter [Roberts, 2001]. Although Dark Winter is about BioTerrorism, it still conveys the type of strategic level decision-making and containment skills that would be necessary in a massive Cyber Terrorism event.

Typically combinations of custom built & high end network design packages used in role playing scenarios. Network Warfare Simulation (NETWARS) is a communications  modeling  tool that enables the warfighter to credibly model  tactical and operational  communications demands with  all the stresses that combat places on communications systems.  

D-wall is a deception mechanism that produces “deception” traffic on a network similar to a honeypot Cyber Command System is a centralized C2 system allowing command over the cyber security elements in a network; can recommend courses of action Visual NRM is a static mapping tool which uses the Network Rating Methodology to

Drivers in Common Criteria – vendors, government, need for international level