Abstract:Fog computing has gained tremendous popularity due to its capability of addressing the surging demand on high-quality ubiquitous mobile services. Nevertheless, the highly virtualized environment in fog computing leads to vulnerability to cyber attacks such as advanced persistent threats. In this paper, we propose a novel game approach of cyber risk management for the fog computing platform. We adopt the cyber-insurance concept to transfer cyber risks from fog computing platform to a third party. The system model under consideration consists of three main entities, i.e., the fog computing provider, attacker, and cyber-insurer. The fog computing provider dynamically optimizes the allocation of its defense computing resources to improve the security of the fog computing platform which is composed of multiple fog nodes. Meanwhile, the attacker dynamically adjusts the allocation of its attack computing resources to increase the probability of successful attack. Additionally, to prevent from the potential loss due to the attacks, the provider also makes a dynamic decision on the subscription of cyber-insurance for each fog node. Thereafter, the cyber-insurer accordingly determines the premium of cyber-insurance for each fog node. To model this dynamic interactive decision making problem, we formulate a dynamic Stackelberg game. In the lower-level, we formulate an evolutionary subgame to analyze the provider's defense and cyber-insurance subscription strategies as well as the attacker's attack strategy. In the upper-level, the cyber-insurer optimizes its premium strategy, taking into account the evolutionary equilibrium at the lower-level evolutionary subgame. We analytically prove that the evolutionary equilibrium is unique and stable, and we investigate the Stackelberg equilibrium by capitalizing on tools from the optimal control theory. Moreover, we provide a series of insightful analytical and numerical results on the equilibrium -f the dynamic Stackelberg game.

Defense Scheme Against Advanced Persistent Threats in Mobile Fog Computing Security

Mobile Fog Computing Security: A User-Oriented Smart Attack Defense Strategy Based on DQL

Intelligent Attack Defense Scheme Based on DQL Algorithm in Mobile Fog Computing

EI-MTD: Moving Target Defense for Edge Intelligence Against Adversarial Attacks

Security in Fog Computing: A Novel Technique to Tackle an Impersonation Attack

Proactive DDoS Attack Mitigation in Cloud-Fog Environment using Moving Target Defense

Dynamic Resource Management to Defend Against Advanced Persistent Threats in Fog Computing: A Game Theoretic Approach

An Efficient Impersonation Attack Detection Method in Fog Computing

Defense Against Advanced Persistent Threats in Dynamic Cloud Storage: A Colonel Blotto Game Approach

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

Defense Against Advanced Persistent Threats: A Colonel Blotto Game Approach

Dual-Layered Model Protection Scheme Against Backdoor Attacks in Fog Computing-Based Federated Learning

Dynamic Defense Strategy Against Advanced Persistent Threat under Heterogeneous Networks

Fog-based Storage Technology to Fight with Cyber Threat

Stackelberg-Game-Based Defense Analysis Against Advanced Persistent Threats on Cloud Control System.

Adaptive MTD Security using Markov Game Modeling

A Deep Reinforcement Learning-based DDoS Attack Mitigation Scheme for Securing Big Data in Fog-Assisted Cloud Environment

An Adaptive Defense Mechanism to Prevent Advanced Persistent Threats.

Enhancing Security-Problem-Based Deep Learning in Mobile Edge Computing

Markov Decision Process For Automatic Cyber Defense

An MTD-driven Hybrid Defense Method Against DDoS Based on Markov Game in Multi-controller SDN-enabled IoT Networks