Abstract:Cyber vulnerabilities become ever more critical in modern industrial systems since the attacker can utilize the vulnerabilities to degrade their performance or even cause disasters. In 2015, a series of sequential and well-organized cyber attacks intruded into the Ukrainian power grid, compromised access to the control system, and interrupted the power supply system, finally causing a widespread power outage. To assist the defender, e.g., power grid operator, to allocate protection resources against cyber attacks, existing studies have devoted considerable efforts to risk and reliability analysis and interaction analysis using game theory. The defender's protection strategy includes preevent defense strategy and postevent repair strategy. The strategy spaces of both players were static in previous studies. However, facing Ukrainian-style cyber attacks, the strategy spaces could variate during the attacker–defender confrontation. In other words, the vulnerability compromised by the attacker in one stage could expose the subsequential vulnerabilities, leading to the change of strategy spaces. In this work, a multistage attack–defense graph game model is proposed to assist the defender in allocating protection resources optimally against sequential cyber attacks during multiple stages. In addition, we consider the existence of the rationality evolution of the attacker, which mainly results from asymmetric information, capacity limitation, and progressive learning during the confrontation. Compared to previous studies based on static strategy spaces and static rationalities, our model is more practical and effective in dealing with Ukrainian-style cyber attacks. The simulation results show the superiority of our approach, and some notable observations and practical suggestions are summarized for the defender.

Game-Theoretic Analysis of Attack and Defense in Cyber-Physical Network Infrastructures

A Game-Theoretic Method for Cross-Layer Stochastic Resilient Control Design in CPS.

A Game-Theoretic Method for Resilient Control Design in Industrial Multi-Agent CPSs with Markovian and Coupled Dynamics

Cyber and Physical Information Fusion for Infrastructure Protection: A Game-Theoretic Approach

Game Theoretical Dynamic Cybersecurity Defense Strategy for Electrical Cyber Physical Systems

Application of hybrid strategies of complex network attack and defense games

A dynamic defense-attack game scheme with incomplete information for vulnerability analysis in a cyber-physical power infrastructure

A Dynamic Game Analysis and Design of Infrastructure Network Protection and Recovery

Game-theoretical Model for Dynamic Defense Resource Allocation in Cyber-physical Power Systems Under Distributed Denial of Service Attacks

A Dynamic Game Approach to Strategic Design of Secure and Resilient Infrastructure Network

A Game Theory-Based Approach For Vulnerability Analysis Of A Cyber-Physical Power System

Modeling an Attack-Mitigation Dynamic Game-Theoretic Scheme for Security Vulnerability Analysis in a Cyber-Physical Power System

A Game-Theoretic Model On Coalitional Attacks In Smart Grid

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

Game-Theoretic Methods for Robustness, Security, and Resilience of Cyberphysical Control Systems: Games-in-Games Principle for Optimal Cross-Layer Resilient Control Systems

Dynamic Games in Cyber-Physical Security: An Overview

Game-Theoretic Model for Optimal Cyber-Attack Defensive Decision-Making in Cyber-Physical Power Systems

Adaptive Strategic Cyber Defense for Advanced Persistent Threats in Critical Infrastructure Networks

Differential Game Approach for Attack-Defense Strategy Analysis in Internet of Things Networks

Game Theory Based Optimal Defensive Resources Allocation with Incomplete Information in Cyber-Physical Power Systems Against False Data Injection Attacks

Multistage Attack–Defense Graph Game Analysis for Protection Resources Allocation Optimization Against Cyber Attacks Considering Rationality Evolution