Abstract:Fog computing has gained tremendous popularity due to its capability of addressing the surging demand on high-quality ubiquitous mobile services. Nevertheless, the highly virtualized environment in fog computing leads to vulnerability to cyber attacks such as advanced persistent threats. In this paper, we propose a novel game approach of cyber risk management for the fog computing platform. We adopt the cyber-insurance concept to transfer cyber risks from fog computing platform to a third party. The system model under consideration consists of three main entities, i.e., the fog computing provider, attacker, and cyber-insurer. The fog computing provider dynamically optimizes the allocation of its defense computing resources to improve the security of the fog computing platform which is composed of multiple fog nodes. Meanwhile, the attacker dynamically adjusts the allocation of its attack computing resources to increase the probability of successful attack. Additionally, to prevent from the potential loss due to the attacks, the provider also makes a dynamic decision on the subscription of cyber-insurance for each fog node. Thereafter, the cyber-insurer accordingly determines the premium of cyber-insurance for each fog node. To model this dynamic interactive decision making problem, we formulate a dynamic Stackelberg game. In the lower-level, we formulate an evolutionary subgame to analyze the provider's defense and cyber-insurance subscription strategies as well as the attacker's attack strategy. In the upper-level, the cyber-insurer optimizes its premium strategy, taking into account the evolutionary equilibrium at the lower-level evolutionary subgame. We analytically prove that the evolutionary equilibrium is unique and stable, and we investigate the Stackelberg equilibrium by capitalizing on tools from the optimal control theory. Moreover, we provide a series of insightful analytical and numerical results on the equilibrium -f the dynamic Stackelberg game.

The Critical Node Game

The critical node game

A Game-Theoretic Method for Cross-Layer Stochastic Resilient Control Design in CPS.

Attack-Defense Game Analysis of Critical Infrastructure Network Based on Cournot Model with Fixed Operating Nodes

Security and Interdependency in a Public Cloud: A Game-Theoretic Approach

Game Theoretical Security Detection Strategy for Networked Systems

A Cyber-Security Investment Game for Networked Control Systems

Enhancing cloud security: harnessing bayesian game theory for a dynamic defense mechanism

Game-Theoretic Analysis of Attack and Defense in Cyber-Physical Network Infrastructures

Application of hybrid strategies of complex network attack and defense games

A Robust Stackelberg Game for Cyber-Security Investment in Networked Control Systems

Attacker-defender game from a network science perspective.

Noncooperative game-theoretic model for security enhancement in cloud gaming environments

Which Targets to Protect in Critical Infrastructures - A Game-Theoretic Solution From a Network Science Perspective.

Game Theoretical Dynamic Cybersecurity Defense Strategy for Electrical Cyber Physical Systems

Dynamic Resource Management to Defend Against Advanced Persistent Threats in Fog Computing: A Game Theoretic Approach

Cyber War Game in Temporal Networks

Stackelberg Game in Critical Infrastructures from a Network Science Perspective

SoK: Game-Theoretic Cybersecurity: Assumptions, Models, Gaps, and Bridges

A Game Theoretic Method to Model and Evaluate Attack-Defense Strategy in Cloud Computing

Game-Theoretic Model for Optimal Cyber-Attack Defensive Decision-Making in Cyber-Physical Power Systems