Dong-hwan Lee, Suk-joon Yoon, Kook-jin Kim, Haeng-rok Oh, In-sung Han, Dong-kyoo Shin, Journal of Internet Computing and Services, Vol. 22, No. 6, pp. 99-113, Dec. 2021
10.7472/jksii.2021.22.6.99, Full Text:
Keywords: Cyberspace, Cyber Operation, Course Of Action, Operational elements, 5W1H Method

Abstract

In these days, as cyberspace has been recognized as the fifth battlefield area following the land, sea, air, and space, attention has been focused on activities that view cyberspace as an operational and mission domain in earnest. Also, in the 21st century, cyber operations based on cyberspace are being developed as a 4th generation warfare method. In such an environment, the success of the operation is determined by the commander's decision. Therefore, in order to increase the rationality and objectivity of such decision-making, it is necessary to systematically establish and select a course of action (COA). In this study, COA is established by using the method of classifying operational elements necessary for cyber operation, and it is intended to suggest a direction for quantitative evaluation of COA. To this end, we propose a method of composing the COES (Cyber Operational Elements Set), which becomes the COA of operation, and classifying the cyber operational elements identified in the target development process based on the 5W1H Method. In addition, by applying the proposed classification method to the cyber operation elements used in the STUXNET attack case, the COES is formed to establish the attack COAs. Finally, after prioritizing the established COA, quantitative evaluation of the policy was performed to select the optimal COA.

Statistics
Cite this article