Abstract:With the rapid development of Internet and the sharp increase of network crime, network security has become very important and received a lot of attention. We model security issues as stochastic systems. This allows us to find weaknesses in existing security systems and propose new solutions. Exploring the vulnerabilities of existing security tools can prevent cyber-attacks from taking advantages of the system weaknesses. We propose a hybrid network security scheme including intrusion detection systems (IDSs) and honeypots scattered throughout the network. This combines the advantages of two security technologies. A honeypot is an activity-based network security system, which could be the logical supplement of the passive detection policies used by IDSs. This integration forces us to balance security performance versus cost by scheduling device activities for the proposed system. By formulating the scheduling problem as a decentralized partially observable Markov decision process (DEC-POMDP), decisions are made in a distributed manner at each device without requiring centralized control. The partially observable Markov decision process (POMDP) is a useful choice for controlling stochastic systems. As a combination of two Markov models, POMDPs combine the strength of hidden Markov Model (HMM) (capturing dynamics that depend on unobserved states) and that of Markov decision process (MDP) (taking the decision aspect into account). Decision making under uncertainty is used in many parts of business and <a class="link-external link-http" href="http://science.We" rel="external noopener nofollow">this http URL</a> use here for security <a class="link-external link-http" href="http://tools.We" rel="external noopener nofollow">this http URL</a> adopt a high-quality approximation solution for finite-space POMDPs with the average cost criterion, and their extension to DEC-POMDPs. We show how this tool could be used to design a network security framework.

Hidden Markov Model-Based Attack Detection for Networked Control Systems Subject to Random Packet Dropouts

Robust Algorithm for Attack Detection Based on Time‐varying Hidden Markov Model Subject to Outliers

Event-Triggered Control Systems under Stochastic Pulsing Denial-of-Service Attacks

Stochastic Stability Analysis of Networked Control Systems with Random Cryptographic Protection under Random Zero-Measurement Attacks

Network Security Situation Awareness for Industrial Control System under Integrity Attacks

A Dynamic Event-Triggered Secure Monitoring and Control for a Class of Discrete-Time Markovian Jump Systems: A Plug-and-Play Architecture

State Machine Based Malicious Packet Attack Detection and Security Situation Assessment

Adaptive Neural Network-Based Security Asynchronous Control for Uncertain Markov Jump Power Systems with Dead Zone under DoS Attack

Moving Target Defense Approach to Detecting Stuxnet-Like Attacks

Adaptive Event-Driven Control for Continuous Positive Stochastic Jump Models with Cyber Attacks

Stabilization of Networked Control Systems with Hybrid-Driven Mechanism and Probabilistic Cyber Attacks.

Attacks on Data-Driven Process Monitoring Systems: Subspace Transfer Networks

Adaptive Fuzzy Asynchronous Control for Nonhomogeneous Markov Jump Power Systems under Hybrid Attacks

Mode division-based anomaly detection against integrity and availability attacks in industrial cyber-physical systems

Detecting Stealthy Attacks in Power Systems based on Switching and Zonotopes

Constrained-Differential-Evolution-Based Stealthy Sparse Cyber-Attack and Countermeasure in an AC Smart Grid

False-Data-Injection-Enabled Network Parameter Modifications in Power Systems: Attack and Detection

Injection attack estimation of networked control systems subject to hidden DoS attack

Two-channel dynamic event-triggered [math] control for Markovian jump systems under multiple cyber-attacks

Stochastic Tools for Network Intrusion Detection

Likelihood of Cyber Data Injection Attacks to Power Systems