Evolutionary Game Theoretic Analysis of Advanced Persistent Threats Against Cloud Storage

Abass, Ahmed A. Alabdel; Xiao, Liang; Mandayam, Narayan B.; Gajić, Zoran

doi:10.1109/access.2017.2691326

Cited by 41 publications

(26 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Cyber physical system is a critical infrastructure for our society and an appealing target for network attacks. As an advanced and stealthy network attack, APT attack can steal the interactive information between the cyber layer and the physical layer continually and stealthyly [21], [23]. In order to defense the APT attack, too many security tools are deployed to against it such as firewall [6] and IDS [7].…”

Section: Related Workmentioning

confidence: 99%

“…Xiao et al [22] applied cumulative prospect theory to study the interactions between a cyber system and an APT attacker when each player makes subjective decisions to choose their scan interval and attack interval, respectively. Abass et al [23] formulated two boundedly rational APT static games to analyze cloud storage against APT attacker based on the prospect theory. Saad et al [24] explored the potential of prospect theory as a decision-making framework that helps understand how risk and uncertainty can impact the decisions of the smart grid through the Prelec weighting function.…”

Section: Related Workmentioning

confidence: 99%

“…From (8), (11), (21) and (23), no matter how the values of ς 1 , ς 2 , p 1 , p 2 , p 3 , p 4 , χ p and χ k changed in the feasible domain, the relations…”

Section: The Bne Of Sahgmentioning

confidence: 99%

See 2 more Smart Citations

Prospect Theoretic Study of Honeypot Defense Against Advanced Persistent Threats in Power Grid

Tian

Liu

et al. 2020

IEEE Access

View full text Add to dashboard Cite

As one of the most critical infrastructure, the power grid has been increasingly threatened by network attacks, especially advanced persistent threats (APTs). APT in the power grid is a continual and stealthy attack that analyzes the interaction between the cyber layer and the physical layer. The existing offensive and defensive processes for power grid using honeypots against APTs are modeled based on full rationality. Therefore, both the attacker and the defender make decisions to maximize their payoffs under full rationality. However, fully rational decisions made by end-users are not always conformed with the real cases, and prospect theory is a typical boundedly rational method to model these deviations. In this study, we propose a subjective APT-honeypot game model to study the offensive and defensive interactions between the attacker and the defender based on the prospect theory. In this model, we protect the power grid bus nodes by deploying honeypots, which consider both low-and high-interaction honeypot modes. We prove the existence of Bayesian-Nash equilibrium strategies in defense and attack strategies under bounded rationality. In addition, we used IEEE-30 Bus system to verify the proposed model in this paper. Experiment results show that bounded rationality affects strategy selection and reduces attacker's payoffs. INDEX TERMS Honeypot, game theory, power grid, APT, prospect theory.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Prospect Theoretic Study of Honeypot Defense Against Advanced Persistent Threats in Power Grid

Tian

Liu

et al. 2020

IEEE Access

View full text Add to dashboard Cite

show abstract

“…Evolutionary game has been successfuly applied to the areas of Advanced Persistent Threats (APTs), evolving interactions between an attacker and a defender, detecting DDOS, and wireless sensor networks. Alabdel Abass et al [30] studied APTs that represent stealthy, powerful, long-term, and well-funded attacks against cyber systems, such as smart grids, data centres and cloud storage. The authors capture the long-term continuous behaviour of the APTs on the cloud storage devices using evolutionary game.…”

Section: Related Workmentioning

confidence: 99%

Evolutionary Game for Confidentiality in IoT-enabled Smart Grids

Boudko¹,

Aursand²,

Abie³

2020

Preprint

View full text Add to dashboard Cite

We applied evolutionary game theory to extend a resource constrained security game model for confidentiality attacks in an Advanced Metering Infrastructure (AMI), which is a component of IoT-enabled Smart Grids. The AMI is modelled as a tree structure where each node aggregates the information of its children before encrypting it and passing it on to its parent. As a part of the model, we developed a discretization scheme for solving the replicator equations. The aim of this work is to explore the space of possible behaviours of attackers and to develop a framework where the AMI nodes adaptively select the most profitable strategies. Using this model, we simulated the evolution of a population of attackers and defenders on various cases resembling the real life implementation of AMI. We discuss in depth how to enhance security in AMI using evolutionary game theory either by a priori analysis or as a tool to run dynamic and adaptive infrastructure defence.

show abstract

“…Vejandla et al [35] present evolving gaming strategies for attackerdefender in a simulated network nnvironment. Alabdel Abass et al [2] studied Advanced Persistent Threats (APTs) that represent stealthy, powerful, long-term, and well-funded attacks against cyber systems, such as smart grids, data centers and cloud storage. The authors used evolutionary game theory to capture the long-term continuous behavior of the APTs on the cloud storage devices.…”

Section: Evolutionary Game For Securitymentioning

confidence: 99%

An evolutionary game for integrity attacks and defences for advanced metering infrastructure

Boudko

Abie

2018

Proceedings of the 12th European Conference on Software Architecture: Companion Proceedings

View full text Add to dashboard Cite

Smart grids are complex cyber-physical systems that face many security challenges. Advanced Metering Infrastructure (AMI), which is one of the main components of the smart grid, represents an important branch of services with increasing deployments that also introduce new security risks. The nodes of AMIs are featured as resource-constrained. Therefore, security attacks including data integrity attacks on AMIs are of serious concern and require efficient selection of protective strategies. In this paper, we propose an evolutionary game framework that models integrity attacks and defenses in an AMI. The aim of this framework is to study possible behaviors of adversaries and to define how the AMI nodes can adaptively select their strategies with maximum payoffs of the nodes. We present a case study and illustrate how the framework can be applied to investigate the integrity threats in AMI systems. We show the evolution process, based on the replicator dynamic. CCS CONCEPTS• Security and privacy → Network security; Mobile and wireless security;

show abstract

Evolutionary Game Theoretic Analysis of Advanced Persistent Threats Against Cloud Storage

Cited by 41 publications

References 17 publications

Prospect Theoretic Study of Honeypot Defense Against Advanced Persistent Threats in Power Grid

Prospect Theoretic Study of Honeypot Defense Against Advanced Persistent Threats in Power Grid

Evolutionary Game for Confidentiality in IoT-enabled Smart Grids

An evolutionary game for integrity attacks and defences for advanced metering infrastructure

Contact Info

Product

Resources

About