Cyber defense via event-based modeling: An approach for modeling and querying system of systems behaviors for unwanted states

This paper presents a new approach for identifying unknown and/or unwanted states within a system of systems (SoS) architecture using a graphical representation of the event-based modeling language, Monterey Phoenix. The paper demonstrates how the graphical modeling tool can create a single model that contains a mix of human, system, and environmental events, all of which contain event attributes. The purpose of this paper is to demonstrate a new approach to cyber defense by evaluating attributes of human, system, and environmental events.