Abstract:

The article continues and extends the author's work on stochastic model of the Simple Cyber Kill Chain where the cyber-attack process is considered as a stochastic regenerative process. The model also includes the assumption of repeatability of cyber-attacks. On that basis in this article stochastic characteristics of the cyber-attack first time stop are determined such as the number of passed phases the cyber-attack effectively carried out until the attack is stopped, the phase number in which the cyber-attack is stopped and the duration of the cyber-attack until the attack is stopped for the first time. The asymptotic average number of cyber-attacks, stationary probabilities of the cyber-attack being in individual phases and the expected value of the duration of attack cycle and its individual phases also presented.