Optimal strategy selection approach of moving target defense based on Markov time game

被引:0
|
作者
Tan J. [1 ,2 ]
Zhang H. [1 ]
Zhang H. [1 ]
Jin H. [1 ,2 ]
Lei C. [1 ,2 ]
机构
[1] Department of Three, Information Engineering University, Zhengzhou
[2] Henan Key Laboratory of Information Security, Zhengzhou
来源
| 1600年 / Editorial Board of Journal on Communications卷 / 41期
基金
国家重点研发计划; 中国国家自然科学基金;
关键词
Markov decision; Moving target attack; Moving target defense; Optimal strategy selection; Time game;
D O I
10.11959/j.issn.1000-436x.2020003
中图分类号
学科分类号
摘要
For the problem that the existed game model was challenging to model the dynamic continuous characteristics of network attack and defense confrontation effectively, a method based on Markov time game was proposed to select the optimal strategy for moving target defense. Based on the analysis of the attack and defense confrontation process of moving targets, the set of moving target attack and defense strategies was constructed. The dynamics of the single-stage moving target defense process was described by time game. The randomness of multi-stage moving target defense state transformation was described by Markov decision process. At the same time, by abstracting the use of resource vulnerability by attack-defense participants as the alternation of the control of the attack surface, the versatility of the game model was effectively guaranteed. On this basis, the existence of equilibrium was analyzed and proved, and the optimal strategy selection algorithm was designed. Finally, the practicality of the constructed model and the effectiveness of the algorithm are verified by an application example. © 2020, Editorial Board of Journal on Communications. All right reserved.
引用
收藏
页码:42 / 52
页数:10
相关论文
共 23 条
  • [1] Mitropoulos D., Louridas P., Polychronakis M., Et al., Defending against web application attacks: approaches, challenges and implications, IEEE Transactions on Dependable and Secure Computing, (2017)
  • [2] Zheng J., Namin A.S., A survey on the moving target defense strategies: an architectural perspective, Journal of Computer Science and Technology, 34, 1, pp. 207-233, (2019)
  • [3] Cai G.L., Wang B.S., Xing Q.Q., Game theoretic analysis for the mechanism of moving target defense, Frontiers of Information Technology & Electronic Engineering, 18, 12, pp. 2017-2034, (2017)
  • [4] Jiang W., Fang B.X., Tian Z.H., Defense strategies selection based on attack-defense game model, Chinese Journal of Computers, 47, 12, pp. 818-827, (2013)
  • [5] Lin W.Q., Wang H., Liu J.H., Research on active defense technology in network security based on non-cooperative dynamic game theory, Journal of Computer Research and Development, 48, 2, pp. 306-316, (2013)
  • [6] Manadhata P.K., Game Theoretic Approaches to Attack Surface Shifting, pp. 1-13, (2013)
  • [7] Vadlamudi S.G., Sengupta S., Taguinod M., Et al., Moving target defense for web applications using Bayesian Stackelberg games, The 2016 International Conference on Autonomous Agents & Multiagent Systems. International Foundation for Autonomous Agents and Multiagent Systems, pp. 1377-1378, (2016)
  • [8] Lei C., Zhang H.Q., Wan L.M., Et al., Incomplete information Markov game theoretic approach to strategy generation for moving target defense, Computer Communications, 116, pp. 184-199, (2018)
  • [9] Maleki H., Valizadeh M.H., Koch W., Et al., Markov modeling of moving target defense games, Journal of Cryptology, pp. 47-83, (2016)
  • [10] Jajodia S., Ghosh A.K., Swarup V., Et al., Moving target defense: creating asymmetric uncertainty for cyber threats, (2011)