1. Defence Research and Development Canada Recherche et développement pour la défense Canada Canada Social Cyber Networks Joanne Treurniet 18 October 2005

2. Defence R&D Canada R & D pour la défense Canada Context CF Network Operations Centre requires dynamic situational awareness of the state of the network –Security –Availability –Current activities and future plans Goal: to improve computer network defence (CND) on Canadian Forces (CF) networks.

3. Defence R&D Canada R & D pour la défense Canada Operational Impact Effective decision-making requires knowledge of operations and how they depend on the resources on the network: –Hardware –Software –Services –Information Allows prioritization of alerts based on operational impact

4. Defence R&D Canada R & D pour la défense Canada Visualisation in CND Concurrent visualisation of: –the physical and logical state of the network –network security events –network defensive posture –the dependence of military operations on the network Each view provides information at different levels of detail as required by a network manager, an analyst or a commander.

5. Defence R&D Canada R & D pour la défense Canada The Physical/Geospatial View (GIS)

6. Defence R&D Canada R & D pour la défense Canada Structural View (Visio, Graph Theory) Internet

7. Defence R&D Canada R & D pour la défense Canada Dependency Example: Encrypted Mail Internet E-mail client: sender E-mail client: receiver Certificate server Mail Server

8. Defence R&D Canada R & D pour la défense Canada Parallels between Social Networks and Cyber Networks Dependencies and relationships Conversations/Eavesdropping Trust relationships –“I trust that you will give me correct information” –“I trust that you are who you say you are”

9. Defence R&D Canada R & D pour la défense Canada Parallels between Social Networks and Cyber Networks On cyber networks, the structural and social views have to be linked to fully understand the impact of a network event on operations: –If a router goes down, if affects services A, B and C required by missions X, Y and Z In a similar social context: –If person A is removed from the social network, and they are the only link to person B, person B becomes unreachable

10. Defence R&D Canada R & D pour la défense Canada Differences between Social Networks and Computer Networks Humans can adapt to change and computers cannot… yet

11. Defence R&D Canada R & D pour la défense Canada Discuss…

12. Defence R&D Canada R & D pour la défense Canada Defence R&D Canada provides Science and Technology leadership in the advancement and maintenance of Canada’s defence capabilities.