Abstract:Advanced persistent threat (APT) is a kind of stealthy, sophisticated, and long-term cyberattack that has brought severe financial losses and critical infrastructure damages. Existing works mainly focus on APT defense under stable network topologies, while the problem under time-varying dynamic networks (e.g., vehicular networks) remains unexplored, which motivates our work. Besides, the spatiotemporal dynamics in defense resources, complex attackers' lateral movement behaviors, and lack of timely defense make APT defense a challenging issue under time-varying networks. In this paper, we propose a novel game-theoretical APT defense approach to promote real-time and optimal defense strategy-making under both periodic time-varying and general time-varying environments. Specifically, we first model the interactions between attackers and defenders in an APT process as a dynamic APT repair game, and then formulate the APT damage minimization problem as the precise prevention and control (PPAC) problem. To derive the optimal defense strategy under both latency and defense resource constraints, we further devise an online optimal control-based mechanism integrated with two backtracking-forward algorithms to fastly derive the near-optimal solution of the PPAC problem in real time. Extensive experiments are carried out, and the results demonstrate that our proposed scheme can efficiently obtain optimal defense strategy in 54481 ms under seven attack-defense interactions with 9.64$\%$ resource occupancy in stimulated periodic time-varying and general time-varying networks. Besides, even under static networks, our proposed scheme still outperforms existing representative APT defense approaches in terms of service stability and defense resource utilization.

Optimal Defense Strategy Against Intentional Attacks

Optimal Defense Resource Allocation Considering Nonlinear Attack Cost in Power Systems

Defending a series system with individual protection, overarching protection, and disinformation

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

Defense Optimization in Power Systems against False Data Injection Attacks

Optimal resource allocation for defending k-out-of-n systems against sequential intentional and unintentional impacts

Optimal Loading and Protection of Multi-State Systems Considering Performance Sharing Mechanism.

Modeling Of Intentional Attack In Risk Analysis Methods

The impacts of adaptive attacking and defending strategies on mitigation of intentional threats

A Tri‐level Optimization Model for Power Systems Defense Considering Cyber‐physical Interdependence

Optimal Defense Strategies for DDoS Defender Using Bayesian Game Model

Optimal Defense Strategy Selection Method for CPS Considering Integrated Cyber–physical Losses

Attack against Layered Defense

Optimal Defense Resources Allocation for Power System Based on Bounded Rationality Game Theory Analysis

Optimal Network Defense Strategy Selection Method: A Stochastic Differential Game Model

Optimal Strictly Stealthy Attack Design on Cyber-Physical Systems: A Data-Driven Approach.

Threat Repair with Optimization Modulo Theories

Game-Theoretic Model for Optimal Cyber-Attack Defensive Decision-Making in Cyber-Physical Power Systems

Minimax-Regret Robust Defensive Strategy Against False Data Injection Attacks

Optimal Repair Strategy Against Advanced Persistent Threats Under Time-Varying Networks

Optimal Impulse Control for Cyber Risk Management