Abstract:With the rapid development of Internet and the sharp increase of network crime, network security has become very important and received a lot of attention. We model security issues as stochastic systems. This allows us to find weaknesses in existing security systems and propose new solutions. Exploring the vulnerabilities of existing security tools can prevent cyber-attacks from taking advantages of the system weaknesses. We propose a hybrid network security scheme including intrusion detection systems (IDSs) and honeypots scattered throughout the network. This combines the advantages of two security technologies. A honeypot is an activity-based network security system, which could be the logical supplement of the passive detection policies used by IDSs. This integration forces us to balance security performance versus cost by scheduling device activities for the proposed system. By formulating the scheduling problem as a decentralized partially observable Markov decision process (DEC-POMDP), decisions are made in a distributed manner at each device without requiring centralized control. The partially observable Markov decision process (POMDP) is a useful choice for controlling stochastic systems. As a combination of two Markov models, POMDPs combine the strength of hidden Markov Model (HMM) (capturing dynamics that depend on unobserved states) and that of Markov decision process (MDP) (taking the decision aspect into account). Decision making under uncertainty is used in many parts of business and <a class="link-external link-http" href="http://science.We" rel="external noopener nofollow">this http URL</a> use here for security <a class="link-external link-http" href="http://tools.We" rel="external noopener nofollow">this http URL</a> adopt a high-quality approximation solution for finite-space POMDPs with the average cost criterion, and their extension to DEC-POMDPs. We show how this tool could be used to design a network security framework.

Modeling And Evaluation Of Intrusion Tolerant Systems Based On Dynamic Diversity Backups

Vulnerability Analysis of Clock Synchronization Protocol Using Stochastic Petri Net

Modeling of the Mimic Defense Based on Heterogeneous Redundancy

Modeling and Defending Advanced Metering Infrastructure Subjected to Distributed Denial-of-Service Attacks

Proactive Security Defense of Dynamic Network

Vulnerability Analysis of CSP Based on Stochastic Game Theory

Analyzing Survivability of Distributed Information System using SPN

Attacks on Data-Driven Process Monitoring Systems: Subspace Transfer Networks

Adaptive Event-Driven Control for Continuous Positive Stochastic Jump Models with Cyber Attacks

The Strategy of Proactive-Reactive Intrusion Tolerance Recovery Based on Hierarchical Model

Stochastic Modeling and Evaluation for Network Security

Stochastic Tools for Network Intrusion Detection

Modelization and analysis of dynamic heterogeneous redundant system

Improving ICS Cyber Resilience through Optimal Diversification of Network Resources

A Semi-Markovian Jumping System Approach to Secure DPC of Nonlinear Networked Unmanned Marine Vehicle Systems with DoS Attack

Modeling of Intrusion and Defense for Assessment of Cyber Security at Power Substations.

Network Survivability Analysis Based on Stochastic Game Model

Analysis on Diversity, Randomness, and Dynameicity

Performance Modeling Based on GSPN and Markov for Cyberspace Mimic Defense System

Modeling and Performance Analysis of Network-Based Intrusion Detection Cluster

Diversified Software Deployment for Long-Term Risk Mitigation in Cyber-Physical Power Systems