Virtual Cyber Warfare Experiments Based On Empirically Observed Adversarial Intrusion Chain Behavior

Military organizations are attempting to be more proactive in securing critical cyber terrain, which is known as active cyber defense. In this work, we explore a cross-discipline research approach to informing active cyber defense activities. A dataset of empirically observed adversary behaviour activities collected at the 2015 North American International Cyber Summit (NAICS) is added to an existing cyber warfare simulation framework in order to gain new insights about the ways in which defensive cyber operations forces should be deployed. Four virtual experiments are conducted that illuminate important considerations for military planners.