Abstract:Cyber vulnerabilities become ever more critical in modern industrial systems since the attacker can utilize the vulnerabilities to degrade their performance or even cause disasters. In 2015, a series of sequential and well-organized cyber attacks intruded into the Ukrainian power grid, compromised access to the control system, and interrupted the power supply system, finally causing a widespread power outage. To assist the defender, e.g., power grid operator, to allocate protection resources against cyber attacks, existing studies have devoted considerable efforts to risk and reliability analysis and interaction analysis using game theory. The defender's protection strategy includes preevent defense strategy and postevent repair strategy. The strategy spaces of both players were static in previous studies. However, facing Ukrainian-style cyber attacks, the strategy spaces could variate during the attacker–defender confrontation. In other words, the vulnerability compromised by the attacker in one stage could expose the subsequential vulnerabilities, leading to the change of strategy spaces. In this work, a multistage attack–defense graph game model is proposed to assist the defender in allocating protection resources optimally against sequential cyber attacks during multiple stages. In addition, we consider the existence of the rationality evolution of the attacker, which mainly results from asymmetric information, capacity limitation, and progressive learning during the confrontation. Compared to previous studies based on static strategy spaces and static rationalities, our model is more practical and effective in dealing with Ukrainian-style cyber attacks. The simulation results show the superiority of our approach, and some notable observations and practical suggestions are summarized for the defender.

Attack against Layered Defense

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

Optimal Defense Resource Allocation Considering Nonlinear Attack Cost in Power Systems

OPTIMIZING DEFENSE STRATEGIES FOR COMPLEX MULTI-STATE SYSTEMS

Defense in Depth: The Basics of Blockade and Delay

Optimal Defense with Variable Number of Overarching and Individual Protections

Optimal Layered Defense For Site Protection

Influence of Attacker's Target Recognition Ability on Defense Strategy in Homogeneous Parallel Systems

Optimal Defense Strategy Against Intentional Attacks

Analysis of Network Attack and Defense Strategies Based on Pareto Optimum

Multistage Attack–Defense Graph Game Analysis for Protection Resources Allocation Optimization Against Cyber Attacks Considering Rationality Evolution

Minmax defense strategy for multi-state systems

An Attacker–Defender Game Model with Constrained Strategies

Individual vs. overarching protection for minimizing the expected damage caused by an attack

Modeling defensive resource allocation in multilayered systems under probabilistic and strategic risks

Attack–Defense Game Model with Multi-Type Attackers Considering Information Dilemma

Optimal defense-attack strategies between M defenders and N attackers: A method based on cumulative prospect theory

Optimal DDoS Attack Strategy for Cyber–Physical Systems: A Multiattacker–Defender Game

Defence and Attack of Systems with Variable Attacker System Structure Detection Probability

Defending a series system with individual protection, overarching protection, and disinformation

The optimization of the resource distribution among different defense measures is an essential part of the defense strategy