Abstract:Diverse and varied cyber-attacks challenge the operation of the smart-world system that is supported by Internet-of-Things (IoT) (smart cities, smart grid, smart transportation, etc.) and must be carefully and thoughtfully addressed before widespread adoption of the smart-world system can be fully realized. Although a number of research efforts have been devoted to defending against these threats, a majority of existing schemes focus on the development of a specific defensive strategy to deal with specific, often singular threats. In this paper, we address the issue of coalitional attacks, which can be launched by multiple adversaries cooperatively against the smart-world system such as smart cities. Particularly, we propose a game-theory based model to capture the interaction among multiple adversaries, and quantify the capacity of the defender based on the extended Iterated Public Goods Game (IPGG) model. In the formalized game model, in each round of the attack, a participant can either cooperate by participating in the coalitional attack, or defect by standing aside. In our work, we consider the generic defensive strategy that has a probability to detect the coalitional attack. When the coalitional attack is detected, all participating adversaries are penalized. The expected payoff of each participant is derived through the equalizer strategy that provides participants with competitive benefits. The multiple adversaries with the collusive strategy are also considered. Via a combination of theoretical analysis and experimentation, our results show that no matter which strategies the adversaries choose (random strategy, win-stay-lose-shift strategy, or even the adaptive equalizer strategy), our formalized game model is capable of enabling the defender to greatly reduce the maximum value of the expected average payoff to the adversaries via provisioning sufficient defensive resources, which is reflected by setting a proper penalty factor against the adversaries. In addition, we extend our game model and analyze the extortion strategy, which can enable one participant to obtain more payoff by extorting his/her opponents. The evaluation results show that the defender can combat this strategy by encouraging competition among the adversaries, and significantly suppress the total payoff of the adversaries via setting the proper penalty factor.

Adversarial Organization Modeling for Network Attack/Defense

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

Think That Attackers Think: Using First-Order Theory of Mind in Intrusion Response System.

A two-network adversarial game: Model, strategy, and structure

A method of network attack-defense game and collaborative defense decision-making based on hierarchical multi-agent reinforcement learning

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

A Stochastic Modeling of Coordinated Internal and External Attacks

Attack–Defense Game Model with Multi-Type Attackers Considering Information Dilemma

Adversarial Coordination on Social Networks

Network Attack-Defense Simulation Training System Based on HLA

A Hierarchical Model for Distributed Attacks

A Game-Theoretic Model On Coalitional Attacks In Smart Grid

Network Security Modeling and Cyber Attack Simulation Methodology

Learning to Defend by Attacking (and Vice-Versa): Transfer of Learning in Cybersecurity Games

Towards an Iterated Game Model with Multiple Adversaries in Smart-World Systems

Adversarial Decision-Making for Moving Target Defense: A Multi-Agent Markov Game and Reinforcement Learning Approach

Ad Hoc Teamwork in the Presence of Adversaries

Modeling Realistic Adversarial Attacks against Network Intrusion Detection Systems

Adversarial Attacks on Multi-Agent Communication

Building Computer Network Attacks

A Two-Dimension Security Assessing Model for CMDs Combined with Generalized Stochastic Petri Net