Abstract:Deception plays a crucial role in strategic interactions with incomplete information. Motivated by security applications, we study a class of two-player turn-based deterministic games with one-sided incomplete information, in which player 1 (P1) aims to prevent player 2 (P2) from reaching a set of target states. In addition to actions, P1 can place two kinds of deception resources: "traps" and "fake targets" to disinform P2 about the transition dynamics and payoff of the game. Traps "hide the real" by making trap states appear normal, while fake targets "reveal the fiction" by advertising non-target states as targets. We are interested in jointly synthesizing optimal decoy placement and deceptive defense strategies for P1 that exploits P2's misinformation. We introduce a novel hypergame on graph model and two solution concepts: stealthy deceptive sure winning and stealthy deceptive almost-sure winning. These identify states from which P1 can prevent P2 from reaching the target in a finite number of steps or with probability one without allowing P2 to become aware that it is being deceived. Consequently, determining the optimal decoy placement corresponds to maximizing the size of P1's deceptive winning region. Considering the combinatorial complexity of exploring all decoy allocations, we utilize compositional synthesis concepts to show that the objective function for decoy placement is monotone, non-decreasing, and, in certain cases, sub- or super-modular. This leads to a greedy algorithm for decoy placement, achieving a $(1 - 1/e)$-approximation when the objective function is sub- or super-modular. The proposed hypergame model and solution concepts contribute to understanding the optimal deception resource allocation and deception strategies in various security applications.

Deception Maze: A Stackelberg Game-Theoretic Defense Mechanism for Intranet Threats

Hiding and Trapping: A Deceptive Approach for Defending against Network Reconnaissance with Software-Defined Network

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

Game Theory Approaches for Evaluating the Deception-based Moving Target Defense

Integrated Resource Allocation and Strategy Synthesis in Safety Games on Graphs with Deception

A Novel Attack-and-Defense Signaling Game for Optimal Deceptive Defense Strategy Choice

Deceptive Attack and Defense Game in Honeypot-Enabled Networks for the Internet of Things.

Game of Travesty: Decoy-based Psychological Cyber Deception for Proactive Human Agents

Harnessing the Power of Deception in Attack Graph-Based Security Games

Deception by Design: Evidence-Based Signaling Games for Network Defense

A Scalable High Fidelity Decoy Framework Against Sophisticated Cyber Attacks.

An Intelligent Deployment Policy for Deception Resources Based on Reinforcement Learning

A Proactive Decoy Selection Scheme for Cyber Deception using MITRE ATT&CK

WiP: Deception-in-Depth Using Multiple Layers of Deception

A Differentially Private Game Theoretic Approach for Deceiving Cyber Adversaries

Data-driven Defense Strategies for an Infrastructure Network against Multiple Interdictions

Honeypot Allocation for Cyber Deception in Dynamic Tactical Networks: A Game Theoretic Approach

Evaluating Deception and Moving Target Defense with Network Attack Simulation

A Game-theoretic Taxonomy and Survey of Defensive Deception for Cybersecurity and Privacy

Dynamic Defense Strategy Against Advanced Persistent Threat under Heterogeneous Networks

A Bi-Level Stochastic Model with Averse Risk and Hidden Information for Cyber-Network Interdiction