AKOCS: Negentropic Governance for Security Policy Updates
Authors/Creators
Description
AKOCS introduces three governance-oriented stability metrics computed from detection-quality time series: the Oscillation Index (OI), Time-to-Recovery (TTR), and Time-to-Stability (TSS). On top of these metrics, we define a MetaNSI (Meta-Negentropic Stability Index) that aggregates module-level stability while penalizing rigid synchrony, and an ignition gating mechanism that combines MetaNSI with a risk signal to decide whether a policy update is committed, postponed, or rolled back (hysteresis thresholds with emergency override).
The package includes full LaTeX sources, figures, result CSVs, and a reproducibility appendix describing seeds, parameter settings, and statistical evaluation (bootstrap confidence intervals and permutation tests) on seeded synthetic benchmarks. Results show reduced oscillations (lower OI) and faster recovery (shorter TTR) under stricter gating, with comparable TSS.
Positioning: This work is a reproducible synthetic benchmark of a governance-layer gating scheme for security policy updates. It does not claim a novel low-level control-theoretic regulator; instead, it provides an auditable operational wrapper (validate -> propose -> approve -> commit/rollback) with explicit metrics and a MetaNSI-based gate. Real-world SIEM/SOAR validation and baseline comparisons are left for future work.
DOI for this release: 10.5281/zenodo.17774215
AKOCS: Negentropic Governance for Security Policy Updates (v2)
AKOCS is a governance and stability framework that reduces policy oscillations after security-content updates in SIEM/SOAR. It enforces a validate → propose → approve → commit/rollback workflow and makes stability observable via three operational metrics:
-
Oscillation Index (OI): volatility of deviation (lower is better)
-
Time-to-Stability (TSS): steps to regain steady state after onboarding
-
Time-to-Recovery (TTR): steps to recover after drift
Key results (seeded synthetic; STRICT vs LIGHT):
OI 0.056 → 0.039, TTR 80 → 56 steps, TSS unchanged (200 vs 200).
What’s in this record (v2):
-
/paper/ — Overleaf LaTeX sources updated to DOI 10.5281/zenodo.17545833 (tables, figures, metric definitions, YAML change-proposal template).
-
/pdf/ — compiled manuscript (for convenience).
-
/metadata/ — CITATION.cff and ZENODO_METADATA.json.
-
/docs/ — optional ancillary docs.
Reproducibility & handoff:
A separate Developer Handoff Kit (repo structure, governance templates, metrics schema, synthetic data generator, CLI metrics calculator, notebook, Splunk/Sentinel dashboards, CI stub) can be published as a complementary record and linked here via Related identifiers (type Software, relation isSupplementTo).
Related prior record: 10.5281/zenodo.17409110 (earlier release with identical topline results and fewer reproducibility artifacts).
How to cite:
Hrubec, K. (2025). AKOCS: Negentropic Governance for Security Policy Updates (v2). Zenodo. https://doi.org/10.5281/zenodo.17545833
License:
Manuscript & metadata: CC BY 4.0. (Code in the dev kit: MIT, unless stated otherwise.)