Abstract:The generation of optimal defense strategies in dynamic adversarial environments is crucial for cybersecurity. Recently, defense approaches based on evolutionary game theory have gained significant achievements. However, they would fail when facing complex networks and sophisticated attack strategies, due to the fatal drawbacks of defense strategy generation considering atomic attacks only. To relieve this issue, a generic approach for generating defense strategies using evolutionary game theory is proposed in this paper. Initially, a novel payoff quantification method for network attack-defense games based on attack graphs is designed. Innovatively, two factors concerning the decision-maker's degree of irrationality (DI) and the level of environmental security (LES) are introduced into the replicator dynamics equation to model the impacts on equilibrium solutions. Noting that Active Directory (AD) domain service is one of the most used and representative information security management system in Windows domains, from which attack graphs and paths can be plainly extracted and analyzed. Therefore, it is necessary and imperative to anchor AD to unfold the theoretical analyses and experiments validation based on a real environment. Case studies on a real-world AD network demonstrate that the proposed approach is effective and can generate stable and efficient defense strategies.

Information Security Resource Allocation Using Evolutionary Game

Resource Allocation to Information Security in Smart Cities Based on Evolutionary Game

Information Security Problem Research Based on Game Theory

Internal Resource Allocation to Information Security of Smart Cities Using Evolutionary Game Model

The Equilibrium Analysis of Organization Information Security Investment Game

Research on Decision of Cyber Security Investment Based on Evolutionary Game Model

Research on Information Security Model and Security System Design

External Information Security Resource Allocation with the Non-cooperation of Multiple Cities

Information security investment with budget constraint and security information sharing in resource-sharing environments

Security Risk Evaluation of Information Systems Based on Game Theory

Optimal Decision Making Approach for Cyber Security Defense Using Evolutionary Game.

Evolutionary Dynamics of the Interdependent Security Games on Complex Network.

Alternative External Resource Allocation Method to Information Security in Smart Cities

Research on the technology of the intelligent target discovery in information security review

Complementary External Resource Allocation to Information Security in Smart Cities

Research on Information Security Interaction Based on Behavior Trust Measurement Mechanism

Research on Information Security Cost Based on Game-Theory

An Information Source Selection Model Based on Evolutionary Game Theory

The Application and Research of Land and Natural Resources Information Security Model

Adaptive Model of Information Security Technique Investment

A Generic Approach for Network Defense Strategies Generation Based on Evolutionary Game Theory