Computer-Implemented Security Evaluation Methods, Security Evaluation Systems, and Articles of Manufacture

A security evaluation system comprising:

• an interface configured to receive information regarding a physical architecture and a cyber architecture of a facility;
• and
• processing circuitry coupled with the interface and configured to:
• build a model of the facility comprising a plurality of physical areas of the physical architecture and a plurality of cyber areas of the cyber architecture;
• execute the model a plurality of times to simulate a plurality of attacks against the facility by at least one adversary traversing at least one of the areas in the physical domain and at least one of the areas in the cyber domain;
• after the execution, revise the model;
• and
• after the revision, execute the model a plurality of additional times to simulate a plurality of additional attacks against the facility by at least one adversary traversing at least one of the areas in the physical domain and at least one of the areas in the cyber domain.

An article of manufacture comprising:

• computer-readable storage medium comprising programming which causes processing circuitry to perform processing comprising:
• accessing information regarding a physical architecture and a cyber architecture of a facility;
• building a model of the facility comprising a plurality of physical areas of the physical architecture, a plurality of cyber areas of the cyber architecture, and a plurality of pathways between the physical areas and the cyber areas;
• executing the model comprising:
• identifying a target within the facility;
• defining a route of attack by an adversary traversing at least one of the areas in the physical domain and at least one of the areas in the cyber domain to the target;
• detecting the adversary on the route of attack;
• as a result of the detecting, initiating a countdown timer which counts a predetermined length of time;
• and
• determining whether the at least one adversary reached the target before the predetermined length of time has been counted.