Abstract:Resource constrained Internet-of-Things (IoT) devices are highly likely to be compromised by attackers because strong security protections may not be suitable to be deployed. This requires an alternative approach to protect vulnerable components in IoT networks. In this paper, we propose an integrated defense technique to achieve intrusion prevention by leveraging cyberdeception (i.e., a decoy system) and moving target defense (i.e., network topology shuffling). We verify the effectiveness and efficiency of our proposed technique analytically based on a graphical security model in a software defined networking (SDN)-based IoT network. We develop four strategies (i.e., fixed/random and adaptive/hybrid) to address "when" to perform network topology shuffling and three strategies (i.e., genetic algorithm/decoy attack path-based optimization/random) to address "how" to perform network topology shuffling on a decoy-populated IoT network, and analyze which strategy can best achieve a system goal such as prolonging the system lifetime, maximizing deception effectiveness, maximizing service availability, or minimizing defense cost. Our results demonstrate that a software defined IoT network running our intrusion prevention technique at the optimal parameter setting prolongs system lifetime, increases attack complexity of compromising critical nodes, and maintains superior service availability compared with a counterpart IoT network without running our intrusion prevention technique. Further, when given a single goal or a multi-objective goal (e.g., maximizing the system lifetime and service availability while minimizing the defense cost) as input, the best combination of "how" and "how" strategies is identified for executing our proposed technique under which the specified goal can be best achieved.

Bi-Layer Shortest-Path Network Interdiction Game for Internet of Things

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

A Dynamic Game Approach to Designing Secure Interdependent IoT-Enabled Infrastructure Network

Dynamic threshold strategy optimization for security protection in Internet of Things: An adversarial deep learning‐based game‐theoretical approach

A Stackelberg Security Game for Adversarial Outbreak Detection in the Internet of Things.

Game-theoretic physical layer authentication for spoofing detection in internet of things

A Parallel Game Model-Based Intrusion Response System for Cross-Layer Security in Industrial Internet of Things

Proactive Defense for Internet-of-Things: Integrating Moving Target Defense with Cyberdeception

Differential Game Approach for Attack-Defense Strategy Analysis in Internet of Things Networks

Shortest path network interdiction with asymmetric uncertainty

Improving IoT Security Through Stackelberg Game

Data-driven Defense Strategies for an Infrastructure Network against Multiple Interdictions

A Bi-Level Stochastic Model with Averse Risk and Hidden Information for Cyber-Network Interdiction

Leveraging Edge Learning and Game Theory for Intrusion Detection in Internet of Things

A Cooperative Intrusion Detection System for the Internet of Things Using Convolutional Neural Networks and Black Hole Optimization

Towards Deep-Learning-Driven Intrusion Detection for the Internet of Things

DDoS Defense for IoT: A Stackelberg Game Model-Enabled Collaborative Framework

Stackelberg Dynamic Game-Based Resource Allocation in Threat Defense for Internet of Things

Defense Against Shortest Path Attacks

Hitting Moving Targets: Intelligent Prevention of IoT Intrusions on the Fly

Distributed Variational Bayes-Based In-Network Security for the Internet of Things