Abstract:With the rapid development of Internet and the sharp increase of network crime, network security has become very important and received a lot of attention. We model security issues as stochastic systems. This allows us to find weaknesses in existing security systems and propose new solutions. Exploring the vulnerabilities of existing security tools can prevent cyber-attacks from taking advantages of the system weaknesses. We propose a hybrid network security scheme including intrusion detection systems (IDSs) and honeypots scattered throughout the network. This combines the advantages of two security technologies. A honeypot is an activity-based network security system, which could be the logical supplement of the passive detection policies used by IDSs. This integration forces us to balance security performance versus cost by scheduling device activities for the proposed system. By formulating the scheduling problem as a decentralized partially observable Markov decision process (DEC-POMDP), decisions are made in a distributed manner at each device without requiring centralized control. The partially observable Markov decision process (POMDP) is a useful choice for controlling stochastic systems. As a combination of two Markov models, POMDPs combine the strength of hidden Markov Model (HMM) (capturing dynamics that depend on unobserved states) and that of Markov decision process (MDP) (taking the decision aspect into account). Decision making under uncertainty is used in many parts of business and <a class="link-external link-http" href="http://science.We" rel="external noopener nofollow">this http URL</a> use here for security <a class="link-external link-http" href="http://tools.We" rel="external noopener nofollow">this http URL</a> adopt a high-quality approximation solution for finite-space POMDPs with the average cost criterion, and their extension to DEC-POMDPs. We show how this tool could be used to design a network security framework.

Nash mixed detection strategy of multi-type network attack based on zero-sum stochastic game

Hidden Markov Model-Based Attack Detection for Networked Control Systems Subject to Random Packet Dropouts

Hybrid Intrusion Detection System for Complicated Network

Network Inspection Using Heterogeneous Sensors for Detecting Strategic Attacks

Differential Game Approach for Attack-Defense Strategy Analysis in Internet of Things Networks

Optimal Detector Placement in Networked Control Systems under Cyber-attacks with Applications to Power Networks

Stochastic Tools for Network Intrusion Detection

Intrusion Detection for Wireless Sensor Networks: A Multi-Criteria Game Approach.

Dynamic threshold strategy optimization for security protection in Internet of Things: An adversarial deep learning‐based game‐theoretical approach

Enhanced Network Intrusion Detection System for Internet of Things Security Using Multimodal Big Data Representation with Transfer Learning and Game Theory

A Dynamic Game Approach to Designing Secure Interdependent IoT-Enabled Infrastructure Network

Signaling Game Based Strategy of Intrusion Detection in Wireless Sensor Networks.

Strategies of attack–defense game for wireless sensor networks considering the effect of confidence level in fuzzy environment

Game Strategies for Distributed Denial of Service Defense in the Cloud of Things

A Cooperative Intrusion Detection System for the Internet of Things Using Convolutional Neural Networks and Black Hole Optimization

A Novel Approach for Security Situational Awareness in the Internet of Things

DDoS Defense for IoT: A Stackelberg Game Model-Enabled Collaborative Framework

Dynamic game strategy for jamming attack in smart grid communications

Design and Implementation of IoT DDoS Attacks Detection System based on Machine Learning

Application of hybrid strategies of complex network attack and defense games

An AI-Powered Network Threat Detection System