Abstract:This paper is concerned with the synthesis of strategies in network systems with active cyber deception. Active deception in a network employs decoy systems and other defenses to conduct defensive planning against the intrusion of malicious attackers who have been confirmed by sensing systems. In this setting, the defender's objective is to ensure the satisfaction of security properties specified in temporal logic formulas. We formulate the problem of deceptive planning with decoy systems and other defenses as a two-player games with asymmetrical information and Boolean payoffs in temporal logic. We use level-2 hypergame with temporal logic objectives to capture the incomplete/incorrect knowledge of the attacker about the network system as a payoff misperception. The true payoff function is private information of the defender. Then, we extend the solution concepts of $omega$-regular games to analyze the attacker's rational strategy given her incomplete information. By generalizing the solution of level-2 hypergame in the normal form to extensive form, we extend the solutions of games with safe temporal logic objectives to decide whether the defender can ensure security properties to be satisfied with probability one, given any possible strategy that is perceived to be rational by the attacker. Further, we use the solution of games with co-safe (reachability) temporal logic objectives to determine whether the defender can engage the attacker, by directing the attacker to a high-fidelity honeypot. The effectiveness of the proposed synthesis methods is illustrated with synthetic network systems with honeypots.

Demonstrating topoS: Theorem-Prover-Based Synthesis of Secure Network Configurations

ALGORITHM AND REALIZATION OF NETWORK TOPOLOGY DISCOVERY

Nettopo: Beyond Simulator And Visualizer For Wireless Sensor Networks

Combination Attacks and Defenses on SDN Topology Discovery.

Network Can Help Check Itself: Accelerating SMT-based Network Configuration Verification Using Network Domain Knowledge

Towards the formal verification of security properties of a Network-on-Chip router

Defending Against SDN Network Topology Poisoning Attacks

SecureNT: A Practical Framework for Efficient Topology Protection and Monitoring

SymNet: scalable symbolic execution for modern networks

User-Guided Verification of Security Protocols via Sound Animation

Scalable Automated Verification for Cyber-Physical Systems in Isabelle/HOL

Formal Analysis and Verification of Security for Automated Trust Negotiation

Configuration Monitor Synthesis

Secure-by-synthesis network with active deception and temporal logic specifications

SENSE: Abstraction-Based Synthesis of Networked Control Systems

Procedural Generation of Communication Networks in Power Systems

SDT: A Low-cost and Topology-reconfigurable Testbed for Network Research

Proofs as Relational Invariants of Synthesized Execution Grammars

Threat Repair with Optimization Modulo Theories

Directed Security Policies: A Stateful Network Implementation

A Topos View of Blockchain Consensus Protocols