基于数学模拟模型的混合桌面演练（TTX）用于海运领域
Hybrid Tabletop Exercise (TTX) based on a Mathematical Simulation-based Model for the Maritime Sector
AI总结：
本文提出一种基于数学模拟模型的混合桌面演练，用于提升海运领域网络安全态势感知和治理能力。
摘要：
随着网络威胁的复杂性和规模不断增加，许多安全事件由于高级管理层缺乏适当培训而管理不当。因此，需要有针对性的网络安全教育来提高管理层的决策能力和危机应对能力。传统的培训方法，如网络攻防游戏和桌面演练（TTX），旨在培养应对关键事件的能力，但往往缺乏交互性和动态性，无法为现实世界中的网络事件做充分准备。本文通过设计一个专门的混合TTX来改进网络安全和网络防御教育，该TTX采用框架数学建模的方式，模拟网络攻击如何沿着多个节点传播并影响基础设施。我们的方案通过在阿根廷和美国的演练得到了验证，展示了在提升网络安全态势感知（CSA）的理解和预测水平以及加强治理方面积极的影响。关于混合TTX、场景、数据集和SERDUX-MARCIM模型的实施文档可在项目存储库中获取：https://github.com/diegocabuya/SERDUX-MARCIM
英文摘要：
As cyber threats grow in complexity and scale, many security incidents remain poorly managed due to the lack of proper training among C-level executives. Thus, there is a need for targeted cybersecurity education to enhance executive decision-making and crisis response. Traditional training methods, such as cyber wargames and Tabletop Exercises (TTX), aim to develop abilities to face critical incidents, however, they often lack the interactive and dynamic elements required to prepare individuals for real-world cyber incidents. This paper presents a novel approach to cybersecurity and cyberdefense education through the design of a specialized hybrid TTX for the maritime domain, which uses a framework to model mathematically how a cyberattack spreads along multiple nodes and impacts infrastructure. Our proposal was validated through exercises in Argentina and the United States, demonstrating a positive impact in developing the comprehension and projection levels of Cyber Situational Awareness (CSA), and reinforcing governance. Documentation about the Hybrid TTX, scenario, datasets and implementation of the SERDUX-MARCIM model, is available at the project repository at https://github.com/diegocabuya/SERDUX-MARCIM
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
