Visible to the public Optimal Cyber-Defense Strategies for Advanced Persistent Threats: A Game Theoretical Analysis

TitleOptimal Cyber-Defense Strategies for Advanced Persistent Threats: A Game Theoretical Analysis
Publication TypeConference Paper
Year of Publication2017
AuthorsAcquaviva, J., Mahon, M., Einfalt, B., LaPorta, T.
Conference Name2017 IEEE 36th Symposium on Reliable Distributed Systems (SRDS)
Keywordsadvanced persistent threats, budget constrained network administrators, Cognition, Cyber attack modeling, cyber attackers, Data models, defense budget, Exponential distribution, expressive model, game theoretical analysis, game theory, Games, graph edges, Human Behavior, Mathematical model, Metrics, network administrator, Network security, optimal cyber-defense strategies, pubcrawl, rational attacker, rational strategy, resilience, Resiliency, Scalability, security, security of data, Zero-Sum Games, zero-sum repeated game
Abstract

We introduce a novel mathematical model that treats network security as a game between cyber attackers and network administrators. The model takes the form of a zero-sum repeated game where each sub-game corresponds to a possible state of the attacker. Our formulation views state as the set of compromised edges in a graph opposed to the more traditional node-based view. This provides a more expressive model since it allows the defender to anticipate the direction of attack. Both players move independently and in continuous time allowing for the possibility of one player moving several times before the other does. This model shows that defense-in-depth is not always a rational strategy for budget constrained network administrators. Furthermore, a defender can dissuade a rational attacker from attempting to attack a network if the defense budget is sufficiently high. This means that a network administrator does not need to make their system completely free of vulnerabilities, they only to ensure the penalties for being caught outweigh the potential rewards gained.

URLhttp://ieeexplore.ieee.org/document/8069083/
DOI10.1109/SRDS.2017.29
Citation Keyacquaviva_optimal_2017