Abstract:Estimating the global state of a networked system is an important problem in many application domains. The classical approach to tackling this problem is the periodic (observation) method, which is inefficient because it often observes states at a very high frequency. This inefficiency has motivated the idea of event-based method, which leverages the evolution dynamics in question and makes observations only when some rules are triggered (i.e., only when certain conditions hold). This paper initiates the investigation of using the event-based method to estimate the equilibrium in the new application domain of cybersecurity, where equilibrium is an important metric that has no closed-form solutions. More specifically, the paper presents an event-based method for estimating cybersecurity equilibrium in the preventive and reactive cyber defense dynamics, which has been proven globally convergent. The presented study proves that the estimated equilibrium from our trigger rule i) indeed converges to the equilibrium of the dynamics and ii) is Zeno-free, which assures the usefulness of the event-based method. Numerical examples show that the event-based method can reduce 98% of the observation cost incurred by the periodic method. In order to use the event-based method in practice, this paper investigates how to bridge the gap between i) the continuous state in the dynamics model, which is dubbed probability-state because it measures the probability that a node is in the secure or compromised state, and ii) the discrete state that is often encountered in practice, dubbed sample-state because it is sampled from some nodes. This bridge may be of independent value because probability-state models have been widely used to approximate exponentially-many discrete state systems.

Preventive and Reactive Cyber Defense Dynamics is Globally Stable

Preventive and Reactive Cyber Defense Dynamics with Ergodic Time-dependent Parameters is Globally Attractive

Active Cyber Defense Dynamics Exhibiting Rich Phenomena.

Cybersecurity Dynamics: A Foundation for the Science of Cybersecurity

A Stochastic Model of Active Cyber Defense Dynamics

An asymmetric interdependent networks model for cyber-physical systems

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

A Game-Theoretic Method for Cross-Layer Stochastic Resilient Control Design in CPS.

A Game-Theoretic Method for Resilient Control Design in Industrial Multi-Agent CPSs with Markovian and Coupled Dynamics

Cyber Protection for Malware Attack Resistance in Cyber-Physical Power Systems

Adaptive Event-Driven Control for Continuous Positive Stochastic Jump Models with Cyber Attacks

Using Event-Based Method to Estimate Cybersecurity Equilibrium

Analysis of Contagion Dynamics with Active Cyber Defenders

Stabilization of Networked Control Systems with Hybrid-Driven Mechanism and Probabilistic Cyber Attacks.

Dynamics of an ecological model with impulsive control strategy and distributed time delay.

Cybersecurity Analysis of Data-Driven Power System Stability Assessment

Simulations of Event-Based Cyber Dynamics via Adversarial Machine Learning

Dynamic defenses in cyber security: Techniques, methods and challenges

Game Theoretical Dynamic Cybersecurity Defense Strategy for Electrical Cyber Physical Systems

Original article: Dynamics of an ecological model with impulsive control strategy and distributed time delay

Dynamic Games in Cyber-Physical Security: An Overview