Abstract:Advanced persistent threat (APT) is a kind of stealthy, sophisticated, and long-term cyberattack that has brought severe financial losses and critical infrastructure damages. Existing works mainly focus on APT defense under stable network topologies, while the problem under time-varying dynamic networks (e.g., vehicular networks) remains unexplored, which motivates our work. Besides, the spatiotemporal dynamics in defense resources, complex attackers' lateral movement behaviors, and lack of timely defense make APT defense a challenging issue under time-varying networks. In this paper, we propose a novel game-theoretical APT defense approach to promote real-time and optimal defense strategy-making under both periodic time-varying and general time-varying environments. Specifically, we first model the interactions between attackers and defenders in an APT process as a dynamic APT repair game, and then formulate the APT damage minimization problem as the precise prevention and control (PPAC) problem. To derive the optimal defense strategy under both latency and defense resource constraints, we further devise an online optimal control-based mechanism integrated with two backtracking-forward algorithms to fastly derive the near-optimal solution of the PPAC problem in real time. Extensive experiments are carried out, and the results demonstrate that our proposed scheme can efficiently obtain optimal defense strategy in 54481 ms under seven attack-defense interactions with 9.64$\%$ resource occupancy in stimulated periodic time-varying and general time-varying networks. Besides, even under static networks, our proposed scheme still outperforms existing representative APT defense approaches in terms of service stability and defense resource utilization.

Optimal network protection against diverse interdictor strategies

Evolving Defense Mechanism for Future Network Security

Optimal Protection of General Source-Sink Networks Via Evolutionary Techniques.

Data-driven Defense Strategies for an Infrastructure Network against Multiple Interdictions

Optimal Defense Resource Allocation Considering Nonlinear Attack Cost in Power Systems

Analysis of Network Attack and Defense Strategies Based on Pareto Optimum

Optimal DDoS Attack Strategy for Cyber–Physical Systems: A Multiattacker–Defender Game

Computing Optimal Security Strategies for Interdependent Assets

Optimal Defense with Variable Number of Overarching and Individual Protections

Optimal Network Defense Strategy Selection Method: A Stochastic Differential Game Model

The Impact of Network Design Interventions on the Security of Interdependent Systems

Optimal Allocation of Protective Resources in Urban Rail Transit Networks Against Intentional Attacks

Application of hybrid strategies of complex network attack and defense games

An Attacker–Defender Game Model with Constrained Strategies

Optimal Joint Control and Triggering Strategies Against Denial of Service Attacks: A Zero-Sum Game

Optimal Protection Resource Allocation: A Perspective of Network Science

The optimization of the resource distribution among different defense measures is an essential part of the defense strategy

Protecting infrastructure networks from cost-based attacks

Which Link Matters? Maintaining Connectivity of Uncertain Networks Under Adversarial Attack

Interoperable Defensive Strategies of Network Security Evaluation

Optimal Repair Strategy Against Advanced Persistent Threats Under Time-Varying Networks