Index Catalog // Deep Blue Data

Need language around using Deep Blue Data as a repository for your NIH data sharing plan? See Data Sharing Boilerplate

Start Over

Filtering by: Creator Singh, Satinder Creator Nguyen, Thanh H. Discipline Engineering

Multi-Stage Attack Graph Security Games: Heuristic Strategies, with Empirical Game-Theoretic Analysis --- Dataset

Creator:

Nguyen, Thanh H., Wright, Mason, Wellman, Michael P., and Singh, Satinder

Description:

In this work , we study the problem of allocating limited security countermeasures to protect network data from cyber-attacks, for scenarios modeled by Bayesian attack graphs. We consider multi-stage interactions between a network administrator and cybercriminals, formulated as a security game. We propose parameterized heuristic strategies for the attacker and defender and provide detailed analysis of their time complexity. Our heuristics exploit the topological structure of attack graphs and employ sampling methods to overcome the computational complexity in predicting opponent actions. Due to the complexity of the game, we employ a simulation-based approach and perform empirical game analysis over an enumerated set of heuristic strategies. Finally, we conduct experiments in various game settings to evaluate the performance of our heuristics in defending networks, in a manner that is robust to uncertainty about the security environment.

Keyword:

Empirical Game-Theoretic Analysis, Multi-stage Security Games, Attack Graph, Game Theory, and Moving Target Defense

Discipline:

Science and Engineering