Abstract:Advanced persistent threat (APT) for data theft poses a severe threat to cloud storage systems (CSSs). An APT actor may steal valuable data from the target CSS even in a strategic fashion. To protect a CSS from APT, the cloud defender has to dynamically allocate the limited security resources to recover the compromised storage servers, aiming at mitigating his total loss. This paper addresses this dynamic cloud storage recovery (DCSR) problem by employing differential game theory. First, by introducing an expected state evolution model capturing the CSS's expected state evolution process under a combination of attack strategy and recovery strategy, we measure the APT attacker's net benefit and the cloud defender's total loss. On this basis and in the worst-case situation where the cloud defender assumes that the APT attacker has full knowledge of his expected loss, we reduce the DCSR problem to a differential game-theoretic problem (the DCSR* problem) to characterize the strategic interactions between the two parties. Second, we derive a necessary condition for Nash equilibrium of the DCSR* problem and thereby introduce the concept of competitive strategy profile. Next, we study the structural properties of the competitive strategy profile, followed by some numerical examples. Then, we conduct extensive comparative experiments to exhibit that the competitive strategy profile is superior to a large number of randomly generated strategy profiles in the sense of Nash equilibrium solution concept. Finally, we briefly analyze the practicability (scalability and feasibility) of this paper. Our findings will be helpful to enhance the APT defense capabilities of the cloud defender.

Dynamic-network-structure Based on Defense Technology against Denial of Service Attacks in Cloud Environment

Asidps: Auto-Scaling Intrusion Detection And Prevention System For Cloud

Intrinsic Security: A Robust Framework for Cloud-Native Network Slicing via a Proactive Defense Paradigm

Redball: Throttling Shrew Attack in Cloud Data Center Networks

Numerical Evaluation of Cloud-Side Shuffling Defenses against DDoS Attacks on Proxied Multiserver Systems

DDoS Detection and Protection Based on Cloud Computing Platform

Can We Beat Ddos Attacks in Clouds?

A Stabilizing Architecture for Cloud Control System Against Distributed Denial of Service (ddos) Attack

RAM: A Resource-Aware DDoS Attack Mitigation Framework in Clouds

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

A Defense Strategy Against LDDoS Attack Aggregation in DCN.

DDoS Defense Mechanism Based on Software Defined Network

DDoS attack protection in the era of cloud computing and Software-Defined Networking

Defend Against Application-Layer Distributed Denial-of-Service Attacks Based on Session Suspicion Probability Model

Dynamic Defense Strategy Against Advanced Persistent Threat under Heterogeneous Networks

Efficient Distributed Denial-of-Service Attack Defense in SDN-Based Cloud

A confidence-based filtering method for DDoS attack defense in cloud environment

A Defense Mechanism for Distributed Denial of Service Attack in Software-Defined Networks

The Design of Power Security Defense System Based on Resource Pool Cloud Computing Technology

On Dynamic Recovery of Cloud Storage System under Advanced Persistent Threats

Shrew Attack in Cloud Data Center Networks