Using DESM to demonstrate how behavior can impact an enterprise's physical attack surface structure

This paper addresses behaviors affecting the attack surface structure of a simulated enterprise model. The work conducted identifies human factors that contribute to the enterprise’s physical attack surface. Such factors can be social engineering, phishing, insider threats, inadequate employee awareness and training (AET), etc. By leveraging a Descriptive Enterprise System Model (DESM), we demonstrate how behavior impacts the enterprise's physical attack surface structure. The focus in this phase of the research is associating human factors that contribute to this condition. The model is leveraged to make two observations: (1) isolate behavior functionally as a factor impacting the enterprise’s physical attack surface and (2) isolate human factors as an indicator of an enterprise’s behavior.