Abstract:Cyber vulnerabilities become ever more critical in modern industrial systems since the attacker can utilize the vulnerabilities to degrade their performance or even cause disasters. In 2015, a series of sequential and well-organized cyber attacks intruded into the Ukrainian power grid, compromised access to the control system, and interrupted the power supply system, finally causing a widespread power outage. To assist the defender, e.g., power grid operator, to allocate protection resources against cyber attacks, existing studies have devoted considerable efforts to risk and reliability analysis and interaction analysis using game theory. The defender's protection strategy includes preevent defense strategy and postevent repair strategy. The strategy spaces of both players were static in previous studies. However, facing Ukrainian-style cyber attacks, the strategy spaces could variate during the attacker–defender confrontation. In other words, the vulnerability compromised by the attacker in one stage could expose the subsequential vulnerabilities, leading to the change of strategy spaces. In this work, a multistage attack–defense graph game model is proposed to assist the defender in allocating protection resources optimally against sequential cyber attacks during multiple stages. In addition, we consider the existence of the rationality evolution of the attacker, which mainly results from asymmetric information, capacity limitation, and progressive learning during the confrontation. Compared to previous studies based on static strategy spaces and static rationalities, our model is more practical and effective in dealing with Ukrainian-style cyber attacks. The simulation results show the superiority of our approach, and some notable observations and practical suggestions are summarized for the defender.

Optimal Network Defense Resource Allocation Against Advanced Persistent Threats

Optimal Repair Strategy Against Advanced Persistent Threats Under Time-Varying Networks

Optimal Defense Resource Allocation Considering Nonlinear Attack Cost in Power Systems

Optimal Protection Resource Allocation: A Perspective of Network Science

Optimal Resource Allocation and Feasible Hexagonal Topology for Cyber-Physical Systems

Protecting infrastructure networks from cost-based attacks

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

Defense Against Advanced Persistent Threat Through Data Backup and Recovery

Adaptive Strategic Cyber Defense for Advanced Persistent Threats in Critical Infrastructure Networks

Fortify Your Defenses: Strategic Budget Allocation to Enhance Power Grid Cybersecurity

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

Defending against Contagious Attacks on a Network with Resource Reallocation

Defending transportation networks against random and targeted attacks

Defending Against Advanced Persistent Threats using Game-Theory

A game-theoretic method to optimize allocation of defensive resource to protect urban water treatment plants against physical attacks

Optimal Defense Resources Allocation for Power System Based on Bounded Rationality Game Theory Analysis

Allocating Limited Resources to Protect a Massive Number of Targets Using a Game Theoretic Model

Combating Advanced Persistent Threats: Challenges and Solutions

Multistage Attack–Defense Graph Game Analysis for Protection Resources Allocation Optimization Against Cyber Attacks Considering Rationality Evolution

Security evaluation of cyber networks under advanced persistent threats

Game Theory Based Optimal Defensive Resources Allocation with Incomplete Information in Cyber-Physical Power Systems Against False Data Injection Attacks