Abstract:Fog computing has gained tremendous popularity due to its capability of addressing the surging demand on high-quality ubiquitous mobile services. Nevertheless, the highly virtualized environment in fog computing leads to vulnerability to cyber attacks such as advanced persistent threats. In this paper, we propose a novel game approach of cyber risk management for the fog computing platform. We adopt the cyber-insurance concept to transfer cyber risks from fog computing platform to a third party. The system model under consideration consists of three main entities, i.e., the fog computing provider, attacker, and cyber-insurer. The fog computing provider dynamically optimizes the allocation of its defense computing resources to improve the security of the fog computing platform which is composed of multiple fog nodes. Meanwhile, the attacker dynamically adjusts the allocation of its attack computing resources to increase the probability of successful attack. Additionally, to prevent from the potential loss due to the attacks, the provider also makes a dynamic decision on the subscription of cyber-insurance for each fog node. Thereafter, the cyber-insurer accordingly determines the premium of cyber-insurance for each fog node. To model this dynamic interactive decision making problem, we formulate a dynamic Stackelberg game. In the lower-level, we formulate an evolutionary subgame to analyze the provider's defense and cyber-insurance subscription strategies as well as the attacker's attack strategy. In the upper-level, the cyber-insurer optimizes its premium strategy, taking into account the evolutionary equilibrium at the lower-level evolutionary subgame. We analytically prove that the evolutionary equilibrium is unique and stable, and we investigate the Stackelberg equilibrium by capitalizing on tools from the optimal control theory. Moreover, we provide a series of insightful analytical and numerical results on the equilibrium -f the dynamic Stackelberg game.

Modeling and Study of Defense Outsourcing Against Advanced Persistent Threat Through Impulsive Differential Game Approach

Impulsive Artificial Defense Against Advanced Persistent Threat.

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

A Risk Management Approach to Defending Against the Advanced Persistent Threat

Effective Repair Strategy Against Advanced Persistent Threat: A Differential Game Approach

Deception Maze: A Stackelberg Game-Theoretic Defense Mechanism for Intranet Threats

A Dynamic Games Approach to Proactive Defense Strategies against Advanced Persistent Threats in Cyber-Physical Systems

Adaptive Strategic Cyber Defense for Advanced Persistent Threats in Critical Infrastructure Networks

Optimal Repair Strategy Against Advanced Persistent Threats Under Time-Varying Networks

Defending Against the Advanced Persistent Threat: an Optimal Control Approach.

Defense for Advanced Persistent Threat with Inadvertent and Malicious Insider Threats

On Dynamic Recovery of Cloud Storage System under Advanced Persistent Threats

A Stochastic Game Theoretic Approach to Attack Prediction and Optimal Active Defense Strategy Decision

Defense Against Advanced Persistent Threats: A Colonel Blotto Game Approach

Optimal Defense Strategy against Evasion Attacks.

Dynamic Defense Strategy Against Advanced Persistent Threat under Heterogeneous Networks

Data-driven Defense Strategies for an Infrastructure Network against Multiple Interdictions

Defense for Advanced Persistent Threat with Inadvertent or Malicious Insider Threats

Dynamic Resource Management to Defend Against Advanced Persistent Threats in Fog Computing: A Game Theoretic Approach

Defense Against Advanced Persistent Threat Through Data Backup and Recovery

FlipIt Game Model-Based Defense Strategy Against Cyberattacks on SCADA Systems Considering Insider Assistance