Abstract:Fog computing has gained tremendous popularity due to its capability of addressing the surging demand on high-quality ubiquitous mobile services. Nevertheless, the highly virtualized environment in fog computing leads to vulnerability to cyber attacks such as advanced persistent threats. In this paper, we propose a novel game approach of cyber risk management for the fog computing platform. We adopt the cyber-insurance concept to transfer cyber risks from fog computing platform to a third party. The system model under consideration consists of three main entities, i.e., the fog computing provider, attacker, and cyber-insurer. The fog computing provider dynamically optimizes the allocation of its defense computing resources to improve the security of the fog computing platform which is composed of multiple fog nodes. Meanwhile, the attacker dynamically adjusts the allocation of its attack computing resources to increase the probability of successful attack. Additionally, to prevent from the potential loss due to the attacks, the provider also makes a dynamic decision on the subscription of cyber-insurance for each fog node. Thereafter, the cyber-insurer accordingly determines the premium of cyber-insurance for each fog node. To model this dynamic interactive decision making problem, we formulate a dynamic Stackelberg game. In the lower-level, we formulate an evolutionary subgame to analyze the provider's defense and cyber-insurance subscription strategies as well as the attacker's attack strategy. In the upper-level, the cyber-insurer optimizes its premium strategy, taking into account the evolutionary equilibrium at the lower-level evolutionary subgame. We analytically prove that the evolutionary equilibrium is unique and stable, and we investigate the Stackelberg equilibrium by capitalizing on tools from the optimal control theory. Moreover, we provide a series of insightful analytical and numerical results on the equilibrium -f the dynamic Stackelberg game.

Active Interdiction Defence Scheme Against False Data-Injection Attacks: A Stackelberg Game Perspective

Stackelberg Interdependent Security Game in Distributed and Hierarchical Cyber-Physical Systems

A Game-Theoretic Method for Cross-Layer Stochastic Resilient Control Design in CPS.

Multi-Objective False Data Injection Attacks of Cyber–Physical Power Systems

Data-driven Control Against False Data Injection Attacks

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

Defense Optimization in Power Systems against False Data Injection Attacks

Resilient Control of Cyber-Physical Systems Against Intelligent Attacker: a Hierarchal Stackelberg Game Approach

False Data Injection- and Propagation-Aware Game Theoretical Approach for Microgrids

Dynamic Resource Management to Defend Against Advanced Persistent Threats in Fog Computing: A Game Theoretic Approach

Game Theory Based Optimal Defensive Resources Allocation with Incomplete Information in Cyber-Physical Power Systems Against False Data Injection Attacks

Differential Game Approach for Modelling and Defense of False Data Injection Attacks Targeting Energy Metering Systems

Security Correction Control of Stochastic Cyber-Physical Systems Subject to False Data Injection Attacks with Heterogeneous Effects

A Robust Stackelberg Game for Cyber-Security Investment in Networked Control Systems

Deception Maze: A Stackelberg Game-Theoretic Defense Mechanism for Intranet Threats

A Dynamic Games Approach to Proactive Defense Strategies against Advanced Persistent Threats in Cyber-Physical Systems

A defense strategy for false data injection attacks in multi-agent systems

Cyber-Physical Risk Assessment for False Data Injection Attacks Considering Moving Target Defences

Optimal Attack Strategy Against Fault Detectors for Linear Cyber-Physical Systems

Minimax-Regret Robust Defensive Strategy Against False Data Injection Attacks

Fuzzy adaptive resilient decentralized control of nonlinear interconnected cyber-physical systems under false data injection attacks