ABSTRACT 

As part of the process of constructing an aptitude test to determine who would be the best fit for cyber warfare operator training in the United States Air Force (USAF), we conducted qualitative interviews with instructors and analyzed existing quantitative course success data. The goal was to determine what makes cyber warfare operator training hard and to see if existing tests could predict who would succeed. The results provide parameters for the goals and current baselines of the United States Air 

ABSTRACT

ABSTRACT:

Despite a growing number of threats, the software engineering community still faces a critical deficit of trained security professionals for defending against cyber attacks. To combat this shortage, efficient prioritization of the effort of security professionals is needed. To address this issue, we present Risk Based Attack Surface Approximation (RASA), which uses crash dump stack traces to approximate the attack surface of a system.

Research in the Five Hard Problems has led to innovative and interdisciplinary advances in cybersecurity. However, a disconnect exists in transferring the research into implementable industry solutions. For example, as of October 2016, 110 papers in the metrics hard problem have been indexed by the Science of Security1. An organization looking to improve its cybersecurity posture may be overwhelmed by the sheer volume of options; organizations who lack cyber expertise may shy away from implementing metrics altogether by not knowing where to start.