Abstract:Security attacks present unique challenges to the design of self-adaptation mechanism for software-intensive systems due to the adversarial nature of the environment. Game-theoretical approaches have been explored in security to model malicious behaviors and design reliable defense for the system in a mathematically grounded manner. However, modeling the system as a single player, as done in prior works, is insufficient for the system under partial compromise and for the design of fine-grained defensive policies where the rest of the system with autonomy can cooperate to mitigate the impact of attacks. To address such issues, we propose a new self-adaptation framework incorporating Bayesian game theory and model the defender (i.e., the system) at the granularity of components. Under security attacks, the architecture model of the system is automatically translated, by the proposed translation process with designed algorithms, into a multi-player Bayesian game. This representation allows each component to be modelled as an independent player, while security attacks are encoded as variant types for the components. By solving for pure equilibrium (i.e., adaptation response), the system’s optimal defensive strategy is dynamically computed, enhancing system resilience against security attacks by maximizing system utility. We validate the effectiveness of our framework through two sets of experiments using generic benchmark tasks tailored for the security domain. Additionally, we exemplify the practical application of our approach through a real-world implementation in the Secure Water Treatment System to demonstrates the applicability and potency in mitigating security risks.

Security Analysis of Dynamic SDN Architectures Based on Game Theory

Game-Theoretic Analysis for Security of Various Software-Defined Networking (SDN) Architectures

Guarding the Perimeter of Cloud-Based Enterprise Networks: an Intelligent SDN Firewall

A Game-Theoretic Method for Cross-Layer Stochastic Resilient Control Design in CPS.

Proactive Security Defense of Dynamic Network

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

A Dynamic Game Approach to Strategic Design of Secure and Resilient Infrastructure Network

A Dynamic Game Analysis and Design of Infrastructure Network Protection and Recovery

Modeling an Attack-Mitigation Dynamic Game-Theoretic Scheme for Security Vulnerability Analysis in a Cyber-Physical Power System

Dynamic-Scheduling Mechanism of Controllers Based on Security Policy in Software-Defined Network

Research on Security Threat Monitoring and Testing Framework in Software - Defined Network Based on Depth Learning

Game-Theoretic Analysis of Attack and Defense in Cyber-Physical Network Infrastructures

Dynamic Games in Cyber-Physical Security: An Overview

A Dynamic Game Approach to Designing Secure Interdependent IoT-Enabled Infrastructure Network

DDoS Defense Method in Software-Defined Space-Air-Ground Network from Dynamic Bayesian Game Perspective

Game Theoretical Dynamic Cybersecurity Defense Strategy for Electrical Cyber Physical Systems

Differential Game Approach for Attack-Defense Strategy Analysis in Internet of Things Networks

A Game-Theoretic Analysis of Cyber Attack-Mitigation in Centralized Feeder Automation System

Network Attack and Defense Modeling and System Security Analysis: A Novel Approach Using Stochastic Evolutionary Game Petri Net

A Game-Theoretical Self-Adaptation Framework for Securing Software-Intensive Systems

On the complexity of sabotage games for network security