Abstract:Security challenges accompany the efficiency. The pervasive integration of information and communications technologies (ICTs) makes cyber-physical systems vulnerable to targeted attacks that are deceptive, persistent, adaptive and strategic. Attack instances such as Stuxnet, Dyn, and WannaCry ransomware have shown the insufficiency of off-the-shelf defensive methods including the firewall and intrusion detection systems. Hence, it is essential to design up-to-date security mechanisms that can mitigate the risks despite the successful infiltration and the strategic response of sophisticated attackers. In this chapter, we use game theory to model competitive interactions between defenders and attackers. First, we use the static Bayesian game to capture the stealthy and deceptive characteristics of the attacker. A random variable called the \textit{type} characterizes users' essences and objectives, e.g., a legitimate user or an attacker. The realization of the user's type is private information due to the cyber deception. Then, we extend the one-shot simultaneous interaction into the one-shot interaction with asymmetric information structure, i.e., the signaling game. Finally, we investigate the multi-stage transition under a case study of Advanced Persistent Threats (APTs) and Tennessee Eastman (TE) process. Two-Sided incomplete information is introduced because the defender can adopt defensive deception techniques such as honey files and honeypots to create sufficient amount of uncertainties for the attacker. Throughout this chapter, the analysis of the Nash equilibrium (NE), Bayesian Nash equilibrium (BNE), and perfect Bayesian Nash equilibrium (PBNE) enables the policy prediction of the adversary and the design of proactive and strategic defenses to deter attackers and mitigate losses.

Effectiveness Evaluation Method for Cyber Deception Based on Dynamic Bayesian Attack Graph

A New Method of Cyber Deception Defense

Game Theory Approaches for Evaluating the Deception-based Moving Target Defense

Asymptotic Security using Bayesian Defense Mechanism with Application to Cyber Deception

Evaluating Deception and Moving Target Defense with Network Attack Simulation

A Survey of Network Requirements for Enabling Effective Cyber Deception

A Proactive Decoy Selection Scheme for Cyber Deception using MITRE ATT&CK

A New Method of Dynamic Network Security Analysis Based on Dynamic Uncertain Causality Graph

Cyber Deception: State of the art, Trends and Open challenges

Decoys in Cybersecurity: An Exploratory Study to Test the Effectiveness of 2-sided Deception

Automating Cyberdeception Evaluation with Deep Learning.

Three Decades of Deception Techniques in Active Cyber Defense -- Retrospect and Outlook

Dynamic Bayesian Games for Adversarial and Defensive Cyber Deception

Towards in-situ Psychological Profiling of Cybercriminals Using Dynamically Generated Deception Environments

Dynamic Network Security Analysis Based on Bayesian Attack Graphs

Game of Travesty: Decoy-based Psychological Cyber Deception for Proactive Human Agents

A Scalable High Fidelity Decoy Framework Against Sophisticated Cyber Attacks.

Cyber Deception Reactive: TCP Stealth Redirection to On-Demand Honeypots

Application Layer Cyber Deception without Developer Interaction

A Bayesian-network-based cybersecurity adversarial risk analysis framework with numerical examples

Optimal design and performance analysis of secure estimator for cyber‐physical systems against deception attacks