Abstract:Security challenges accompany the efficiency. The pervasive integration of information and communications technologies (ICTs) makes cyber-physical systems vulnerable to targeted attacks that are deceptive, persistent, adaptive and strategic. Attack instances such as Stuxnet, Dyn, and WannaCry ransomware have shown the insufficiency of off-the-shelf defensive methods including the firewall and intrusion detection systems. Hence, it is essential to design up-to-date security mechanisms that can mitigate the risks despite the successful infiltration and the strategic response of sophisticated attackers. In this chapter, we use game theory to model competitive interactions between defenders and attackers. First, we use the static Bayesian game to capture the stealthy and deceptive characteristics of the attacker. A random variable called the \textit{type} characterizes users' essences and objectives, e.g., a legitimate user or an attacker. The realization of the user's type is private information due to the cyber deception. Then, we extend the one-shot simultaneous interaction into the one-shot interaction with asymmetric information structure, i.e., the signaling game. Finally, we investigate the multi-stage transition under a case study of Advanced Persistent Threats (APTs) and Tennessee Eastman (TE) process. Two-Sided incomplete information is introduced because the defender can adopt defensive deception techniques such as honey files and honeypots to create sufficient amount of uncertainties for the attacker. Throughout this chapter, the analysis of the Nash equilibrium (NE), Bayesian Nash equilibrium (BNE), and perfect Bayesian Nash equilibrium (PBNE) enables the policy prediction of the adversary and the design of proactive and strategic defenses to deter attackers and mitigate losses.

Enhancing cloud security: harnessing bayesian game theory for a dynamic defense mechanism

A Markov Game Model for AI-based Cyber Security Attack Mitigation

Honeypot Allocation for Cyber Deception in Dynamic Tactical Networks: A Game Theoretic Approach

Dynamic Defense Strategy Against Advanced Persistent Threat under Heterogeneous Networks

Markov Game Modeling of Moving Target Defense for Strategic Detection of Threats in Cloud Networks

Adaptive Strategic Cyber Defense for Advanced Persistent Threats in Critical Infrastructure Networks

Adaptive MTD Security using Markov Game Modeling

Security and Interdependency in a Public Cloud: A Game-Theoretic Approach

A Bayesian Improved Defense Model for Deceptive Attack in Honeypot-Enabled Networks

The critical node game

Attack–Defense Game Model with Multi-Type Attackers Considering Information Dilemma

Dynamic Bayesian Games for Adversarial and Defensive Cyber Deception

Noncooperative game-theoretic model for security enhancement in cloud gaming environments

Deceptive Attack and Defense Game in Honeypot-Enabled Networks for the Internet of Things.

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

Honeypot Game‐theoretical Model for Defending Against APT Attacks with Limited Resources in Cyber‐physical Systems

Game Theoretical Security Detection Strategy for Networked Systems

A Dynamic Games Approach to Proactive Defense Strategies against Advanced Persistent Threats in Cyber-Physical Systems

Asymptotic Security using Bayesian Defense Mechanism with Application to Cyber Deception

Bayesian-poisson Based Modeling of Cyber Attacks in Cloud Computing Networks