Abstract:Resource constrained Internet-of-Things (IoT) devices are highly likely to be compromised by attackers because strong security protections may not be suitable to be deployed. This requires an alternative approach to protect vulnerable components in IoT networks. In this paper, we propose an integrated defense technique to achieve intrusion prevention by leveraging cyberdeception (i.e., a decoy system) and moving target defense (i.e., network topology shuffling). We verify the effectiveness and efficiency of our proposed technique analytically based on a graphical security model in a software defined networking (SDN)-based IoT network. We develop four strategies (i.e., fixed/random and adaptive/hybrid) to address "when" to perform network topology shuffling and three strategies (i.e., genetic algorithm/decoy attack path-based optimization/random) to address "how" to perform network topology shuffling on a decoy-populated IoT network, and analyze which strategy can best achieve a system goal such as prolonging the system lifetime, maximizing deception effectiveness, maximizing service availability, or minimizing defense cost. Our results demonstrate that a software defined IoT network running our intrusion prevention technique at the optimal parameter setting prolongs system lifetime, increases attack complexity of compromising critical nodes, and maintains superior service availability compared with a counterpart IoT network without running our intrusion prevention technique. Further, when given a single goal or a multi-objective goal (e.g., maximizing the system lifetime and service availability while minimizing the defense cost) as input, the best combination of "how" and "how" strategies is identified for executing our proposed technique under which the specified goal can be best achieved.

Dynamic threshold strategy optimization for security protection in Internet of Things: An adversarial deep learning‐based game‐theoretical approach

EI-MTD: Moving Target Defense for Edge Intelligence Against Adversarial Attacks

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

Leveraging Edge Learning and Game Theory for Intrusion Detection in Internet of Things

A Stackelberg Security Game for Adversarial Outbreak Detection in the Internet of Things.

Intrusion Detection in Green Internet of Things: A Deep Deterministic Policy Gradient-Based Algorithm.

Intrusion Detection for Secure Social Internet of Things Based on Collaborative Edge Computing: A Generative Adversarial Network-Based Approach.

A Dynamic Game Approach to Designing Secure Interdependent IoT-Enabled Infrastructure Network

An SDN-Enabled Proactive Defense Framework for DDoS Mitigation in IoT Networks

Dynamic Defense Strategy Against Advanced Persistent Threat under Heterogeneous Networks

Differential Game Approach for Attack-Defense Strategy Analysis in Internet of Things Networks

Moving Target Defense for Internet of Things Based on the Zero-Determinant Theory

Security Defense Strategy Algorithm for Internet of Things Based on Deep Reinforcement Learning

Stackelberg Dynamic Game-Based Resource Allocation in Threat Defense for Internet of Things

Game Strategies for Distributed Denial of Service Defense in the Cloud of Things

An effective DDoS attack mitigation strategy for IoT using an optimization-based adaptive security model

Intrusion Detection into Cloud-Fog-Based IoT Networks Using Game Theory

Proactive Defense for Internet-of-Things: Integrating Moving Target Defense with Cyberdeception

DDoS Defense for IoT: A Stackelberg Game Model-Enabled Collaborative Framework

Enhanced Network Intrusion Detection System for Internet of Things Security Using Multimodal Big Data Representation with Transfer Learning and Game Theory

Bi-Layer Shortest-Path Network Interdiction Game for Internet of Things