Cyber Essentials (CE) comprise a set of controls designed to protect organisations, irrespective of their size, against cyber attacks. The controls are firewalls, secure configuration, user access control, malware protection & security update management. In this work, we explore the extent to which CE remains robust against an ever-evolving threat landscape. To that end, we reconstruct 45 breaches mapped to MiTRE ATT&CK using an Incident Fault Tree ( IFT ) approach. Our method reveals the intersections where the placement of controls could have protected organisations. Then we identify appropriate Cyber Essential controls and/or Additional Controls for these vulnerable intersections. Our results show that CE controls can effectively protect against most attacks during the initial attack phase. However, they may need to be complemented with additional Controls if the attack proceeds further into organisational systems & networks. The Additional Controls (AC) we identify include back-ups, security awareness, logging and monitoring. Our analysis brings to the fore a foundational issue as to whether controls should exclude recovery and focus only on pre-emption. The latter
This paper deals with the concepts of measure controls and of measure vector fields, within the mathematical framework of measure differential equations (MDEs), recently proposed in~\cite{piccoli_measure_2019}. Measure controls can be seen as a generalization of relaxed control. Moreover, they are particularly suitable for studying dynamics with uncertainty. The main results of this paper include establishing the existence and well-posedness of control systems with measure controls and proving the equivalence between measure controls and measure vector fields. The stability and closure properties of the trajectory set are also studied.
This paper is concerned with the null controllability problem for a class of quasilinear parabolic equations under multiplicative control, locally supported in space. For the purpose of proving the existence of a multiplicative control forcing the solution rest at a time $T>0$, we need to establish the decay property of solutions for the system without control first. We have obtained decay estimates for the $L^\infty$-norm and the $H^1$-norm of solutions to the homogenous quasilinear parabolic equations. Notably, the decay of the $L^\infty$-norm requires no smallness condition on the initial data, whereas the decay of the $H^1$-norm requires that the $L^\infty$-norm remains small. Based on the decay estimates and maximum modulus estimate of solutions to quasilinear parabolic equations, together with the local null controllability of quasilinear parabolic equations under additive controls, we prove the null controllability of the quasilinear parabolic equations via multiplicative controls. As a byproduct, we also obtain the global null controllability for large time to the quasilinear parabolic equations via additive controls. Given that the controllability under multiplicative c
Augmenting the control arm in clinical trials with external data can improve statistical power for demonstrating treatment effects. In many time-to-event outcome trials, participants are subject to truncation by death. Direct application of methods for competing risks analysis on the joint data may introduce bias, for example, due to covariate shifts between the populations. In this work, we consider transportability of the conditional cause-specific hazard of the event of interest under the control treatment. Under this assumption, we derive semiparametric efficiency bounds of causal cumulative incidences. This allows for quantification of the theoretical efficiency gain from incorporating the external controls. We propose triply robust estimators that can achieve the efficiency bounds, where the trial controls and external controls are made comparable through time-specific weights in a martingale integral. We conducted a simulation study to show the precision gain of the proposed fusion estimators compared to their counterparts without utilizing external controls. As a real data application, we used two cardiovascular outcome trials conducted to assess the safety of glucagon-like
This paper studies a class of mean-field control (MFC) problems with singular controls under general dynamic state-control-law constraints. We first propose a customized relaxed control formulation to cope with the dynamic mixed constraints and establish the existence of an optimal control using compactification argument in the proper canonical spaces to accommodate singular controls. To further characterize the optimal pair of regular and singular controls, we treat the controlled McKean-Vlasov process as an infinite-dimensional equality constraint and recast the MFC problem as an optimization problem on canonical spaces with constraints on Banach space, allowing us to derive the stochastic maximum principle (SMP) and a class of constrained BSDE using a new Lagrange multipliers method. Additionally, we investigate the uniqueness and the stability result of the solution to the constrained FBSDE associated with the constrained MFC with singular controls.
Shared controls in platform trials comprise concurrent and non-concurrent controls. For a given experimental arm, non-concurrent controls refer to data from patients allocated to the control arm before the arm enters the trial. The use of non-concurrent controls in the analysis is attractive because it may increase the trial's power of testing treatment differences while decreasing the sample size. However, since arms are added sequentially in the trial, randomization occurs at different times, which can introduce bias in the estimates due to time trends. In this article, we present methods to incorporate non-concurrent control data in treatment-control comparisons, allowing for time trends. We focus mainly on frequentist approaches that model the time trend and Bayesian strategies that limit the borrowing level depending on the heterogeneity between concurrent and non-concurrent controls. We examine the impact of time trends, overlap between experimental treatment arms and entry times of arms in the trial on the operating characteristics of treatment effect estimators for each method under different patterns for the time trends. We argue under which conditions the methods lead to
This paper analyzes the reported threats to Industrial Control Systems (ICS)/Operational Technology (OT) and identifies common tactics, techniques, and procedures (TTP) used by threat actors. The paper then uses the MITRE ATT&CK framework to map the common TTPs and provide an understanding of the security controls needed to defend against the reported ICS threats. The paper also includes a review of ICS testbeds and ideas for future research using the identified controls.
This paper studies mean field game (MFG) of controls by featuring the state-control joint distribution and the reflected state process at an exogenous stochastic reflection boundary. We contribute to the literature with a customized relaxed formulation and some new compactification arguments to establish the existence of a Markovian mean field equilibrium (MFE) in the weak sense. We consider an enlarged canonical space, utilizing the dynamic Skorokhod mapping, to accommodate the stochastic reflection boundary process. A fixed-point argument on the extended space using an extension transformation technique is developed to tackle challenges from the joint measure flow of the state and the relaxed control that may not be continuous. Furthermore, the bidirectional connections between the MFG and the $N$-player game are established. We first show that any weak limit of empirical measures induced by $\boldsymbolε$-Nash equilibria in $N$-player games must be supported exclusively on the set of relaxed mean field equilibria, analogous to the propagation of chaos in mean field control problems. We then prove the convergence result that a Markovian MFE in the weak sense can be approximated b
Internet censorship in the Islamic Republic of Iran restricts access to global platforms and services, forcing users to rely on circumvention technologies such as VPNs, proxies, and tunneling tools. This report presents findings from a mixed-methods study of 660 Iranian internet users, with a focus on gamers as a digitally literate and socially networked community. Survey data are combined with network measurements of latency and VPN performance to identify both technical and social strategies of circumvention. Results show that while younger users report higher confidence with circumvention, peer networks, rather than formal training, are the strongest predictors of resilience. Gaming communities, particularly those active on platforms such as Discord and Telegram, serve as hubs for sharing tactics and lowering barriers to adoption. These findings extend existing work on usable security and censorship circumvention by highlighting the intersection of infrastructural conditions and social learning. The study concludes with design and policy implications for developers, researchers, and funders working on digital rights and information controls.
In this article we study the internal controllability of 1D linear hyperbolic balance laws when the number of controls is equal to the number of state variables. The controls are supported in space in an arbitrary open subset. Our main result is a complete characterization of the minimal control time for the exact controllability property.
We consider extended mean-field control problems with multi-dimensional singular controls. A key challenge when analysing singular controls are jump costs. When controls are one-dimensional, jump costs are most naturally computed by linear interpolation. When the controls are multi-dimensional the situation is more complex, especially when the model parameters depend on an additional mean-field interaction term, in which case one needs to "jointly" and "consistently" interpolate jumps both on a distributional and a pathwise level. This is achieved by introducing the novel concept of two-layer parametrisations of stochastic processes. Two-layer parametrisations allow us to equivalently rewrite rewards in terms of continuous functions of parametrisations of the control process and to derive an explicit representation of rewards in terms of minimal jump costs. From this we derive a DPP for extended mean-field control problems with multi-dimensional singular controls. Under the additional assumption that the value function is continuous we characterise the value function as the minimal super-solution to a certain quasi-variational inequality in the Wasserstein space.
We consider the internal control of linear parabolic equations through on-off shape controls, i.e., controls of the form $M(t)χ_{ω(t)}$ with $M(t) \geq 0$ and $ω(t)$ with a prescribed maximal measure. We establish small-time approximate controllability towards all possible final states allowed by the comparison principle with nonnegative controls. We manage to build controls with constant amplitude $M(t) \equiv M$. In contrast, if the moving control set $ω(t)$ is confined to evolve in some region of the whole domain, we prove that approximate controllability fails to hold for small times. The method of proof is constructive. Using Fenchel-Rockafellar duality and the bathtub principle, the on-off shape control is obtained as the bang-bang solution of an optimal control problem, which we design by relaxing the constraints. Our optimal control approach is outlined in a rather general form for linear constrained control problems, paving the way for generalisations and applications to other PDEs and constraints.
This paper gives an existence result for solutions to an elliptic optimal control problem based on a general fractional kernel, where the admissible controls come from a class satisfying both a growth bound and a superlinear-subcritical condition. Each admissible control is known to produce a nontrivial corresponding state by applying the Mountain Pass Theorem to fractional equations. The main theoretical contribution is the construction of a suitable set of admissible controls on which the the standard existence theory for control problems with linear and semi-linear state constraints can be adapted. Extra care is taken to explain what new difficulties arise for these types of control problems, to justify the limitations of this theory. For completeness, the corresponding local elliptic control problem is also studied.
CIS Controls is a set of 20 controls and 171 sub-controls that were created with an idea of having a list of something to implement so that organizations can increase their security. While good in theory, it is a big question of how viable this approach is in practice, and does it really help. There is only a minor number of critical views of CIS Controls and since CIS Controls are marketed by two very influential organizations they are very popular. Yet, there are alternatives published by ISO, NIST and even PCI consortium. In this paper we critically assess CIS Controls, assumptions on which they are based as well as validity of approach and claims made in its favor. The conclusion is that scientific community should be more active regarding this topic, but also that more material is necessary. This is something that CIS and SANS should support if they want to make CIS Controls viable alternative to other approaches.
Negative control variables are increasingly used to adjust for unmeasured confounding bias in causal inference using observational data. They are typically identified by subject matter knowledge and there is currently a severe lack of data-driven methods to find negative controls. In this paper, we present a statistical test for discovering negative controls of a special type -- disconnected negative controls -- that can serve as surrogates of the unmeasured confounder, and we incorporate that test into the Data-driven Automated Negative Control Estimation (DANCE) algorithm. DANCE first uses the new validation test to identify subsets of a set of candidate negative control variables that satisfy the assumptions of disconnected negative controls. It then applies a negative control method to each pair of these validated negative control variables, and aggregates the output to produce an unbiased point estimate and confidence interval for a causal effect in the presence of unmeasured confounding. We (1) prove the correctness of this validation test, and thus of DANCE; (2) demonstrate via simulation experiments that DANCE outperforms both naive analysis ignoring unmeasured confounding
Any program that is designed to accomplish certain objectives, needs to establish program level controls pertaining to the overall goal. A critical aspect that determines the success of a program is the quality of the controls and their effectiveness in accomplishing the goal. Traditional Control Maturity Models primarily focus on the efficiency, management, and optimization of controls, while only indirectly measuring control effectiveness which neglects an essential aspect of control efficacy. In this paper, we highlight the ineffectiveness of these models, outline an adaptable program controls framework, and provide an approach to define measurable attributes (metrics) that enable a zero-defect program. To the best of our knowledge, we believe this is the first paper that provides a structured approach to defining a controls measurement framework and creation of effectiveness metrics that can be adopted by a variety of program use cases.
This paper is concerned with the constrained approximate null controllability of heat equation coupled by a real matrix $P$, where the controls are impulsive and periodically acted into the system through a series of real matrices $\{Q_k\}_{k=1}^\hbar$. The conclusions are given in two cases. In the case that the controls act globally into the system, we prove that the system is global constrained approximate null controllable under a spectral condition of $P$ together with a rank condition of $P$ and $\{Q_k\}_{k=1}^\hbar$; While in the case that the controls act locally into the system, we prove the global constrained approximate null controllability under a stronger condition for $P$ and the same rank condition as the above case. Moreover, we prove that the above mentioned spectral condition of $P$ is necessary for global constrained approximate null controllability of the control problem considered in this paper.
In this paper, we study time optimal control problems for heat equations on $Ω\times \mathbb{R}^+$. Two properties under consideration are the existence and the bang-bang properties of time optimal controls. It is proved that those two properties hold when controls are imposed on some proper subsets of $Ω$; while they do not stand when controls are active on the whole $Ω$. Besides, a new property for eigenfunctions of $-Δ$ with Dirichlet boundary condition is revealed.
This paper proposes to parameterize open loop controls in stochastic optimal control problems via suitable classes of functionals depending on the driver's path signature, a concept adopted from rough path integration theory. We rigorously prove that these controls are dense in the class of progressively measurable controls and use rough path methods to establish suitable conditions for stability of the controlled dynamics and target functional. These results pave the way for Monte Carlo methods to stochastic optimal control for generic target functionals and dynamics. We discuss the rather versatile numerical algorithms for computing approximately optimal controls and verify their accurateness in benchmark problems from Mathematical Finance.
We investigate the convergence of symmetric stochastic differential games with interactions via control, where the volatility terms of both idiosyncratic and common noises are controlled. We apply the stochastic maximum principle, following the approach of Laurière and Tangpi, to reduce the convergence analysis to the study of forward-backward propagation of chaos. Under the standard monotonicity conditions, we derive quantitative convergence rates for open-loop Nash equilibria of $N$-player stochastic differential games toward the corresponding mean field equilibrium. As a prerequisite, we also establish the well-posedness of the conditional McKean--Vlasov forward-backward stochastic differential equations by the method of continuation. Moreover, we analyze a specific class of linear-quadratic settings to demonstrate the applicability of our main result.