静态贝叶斯博弈最优防御策略选取方法

doi:10.19665/j.issn1001-2400.2019.05.008

Abstract

Abstract:

Nowadays, the network optimal defense strategy selection based on the game theory has many disadvantages, such as ignoring the influence of strategy selection ability between attacker and defender, and choosing the defense strategy improperly in the form of probability. In order to solve the problem, an optimal defense strategy selection method based on the static Bayesian game is proposed. The network attack-defense process is modeled from the perspective of incomplete information. The difference of strategy selection ability between attacker and defender is quantified by the convergence degree. The defense effectiveness is quantified on the basis of mixed strategy Bayesian Nash equilibrium. The optimal defense strategy is selected that takes defense effectiveness as the criterion. The rationality and feasibility of the method proposed in this paper are verified via a representative example. Compared with the traditional strategy selection method based on the game theory, this method is more closely related to the actual network and has a greater operability.

Key words: static Bayesian game, optimal defense, mixed strategy Bayesian Nash equilibrium, defense effectiveness

CLC Number:

TP309

WANG Zengguang,LU Yu,LI Xi,LI Zhiwei. Optimal defense strategy selection based on the static Bayesian game[J].Journal of Xidian University, 2019, 46(5): 55-61.

Figures/Tables 4

攻击行动	冒险型攻击方			平衡型攻击方			保守型攻击方
攻击行动	$S 1 A$	$S 2 A$	$S 3 A$	$S 4 A$	$S 5 A$	$S 6 A$	$S 7 A$	$S 8 A$	$S 9 A$
Destroy database	√	√				√
Shutdown server			√		√
Send abnormal data			√		√	√			√
Remote buffer overflow		√		√			√		√
Steal or tamper with data	√	√			√	√
Steal account and crack it	√	√	√					√
UDP flood			√	√	√		√	√	√
TCP-SYN flood	√			√		√
Deface website			√	√				√
Install Trojan	√	√					√

References 12

[1]	ZHANG H W, JIANG L, HUANG S R , et al. Attack-defense Differential Game Model for Network Defense Strategy Selection[J]. IEEE Access, 2019,7:50618-50629.
[2]	HU H, LIU Y, ZHANG H , et al. Optimal Network Defense Strategy Selection Based on Incomplete Information Evolutionary Game[J]. IEEEAccess, 2018,6:29806-29821.
[3]	TOSH D, SENGUPTA S, KAMHOUA C A , et al. Establishing Evolutionary Game Models for Cyber Security Information Exchange[J]. Journal of Computer and System Sciences, 2018,98:27-52.
[4]	AFRAA A, CHATTERJEE M, ZOU C C. A Game Theoretic Approach to Model Cyber Attack and Defense Strategies[C]// Proceedings of the 2018 IEEE International Conference on Communications. Piscataway: IEEE, 2018: 8422719.
[5]	刘刚, 张宏, 李千目 . 基于博弈模型的网络安全最优攻防决策方法[J]. 南京理工大学学报, 2014,38(1):12-21.
	LIU Gang, ZHANG Hong, LI Qianmu . Network Security Optimal Attack and Defense Decision-making Method Based on Game Model[J]. Journal on Nanjing University of Science and Technology, 2014,38(1):12-21.
[6]	LI X, LU Y, NIE W . Network Security Situation Assessment Method Based on Markov Game Model[J]. KSII Transactions on Internet and Information Systems, 2018,12(5):2414-2428.
[7]	张恒巍, 余定坤, 韩继红 , 等. 信号博弈网络安全威胁评估方法[J]. 西安电子科技大学学报, 2016,43(3):137-143.
	ZHANG Hengwei, YU Dingkun, HAN Jihong , et al. Network Security Threat Assessment Based on the Signaling Game[J]. Journal of Xidian University, 2016,43(3):137-143.
[8]	SUN Y, XIONG W, YAO Z H , et al. Analysis of Network Attack and Defense Strategies Based on Pareto Optimum[J]. Electronics, 2018,7(3):246-269.
[9]	ZHANG N B . Defensive Strategy Selection Based on Attack-defense Game Model in Network Security[J]. International Journal of Performability Engineering, 2018,14(11):2633-2642.
[10]	DO C T, TRAN N H, HONG C , et al. Game Theory for Cyber Security and Privacy[J]. ACM Computing Surveys, 2017,50(2):30-37.
[11]	王晋东, 余定坤, 张恒巍 , 等. 静态贝叶斯博弈主动防御策略选取方法[J]. 西安电子科技大学学报, 2016,43(1):144-150. doi: 10.3969/j.issn.1001-2400.2016.01.026
	WANG Jindnog, YU Dingkun, ZHANG Hengwei , et al. Active Defense Strategy Selection Based on Static Bayesian Game[J]. Journal of Xidian University, 2016,43(1):144-150. doi: 10.3969/j.issn.1001-2400.2016.01.026
[12]	LI M, CAO J J . Network Attack Defense Awareness Based on Dynamic Game[J]. International Journal of Security and Its Applications, 2015,9(7):69-78.

文献方法	博弈假设	攻击方类型	防守方类型	收敛性	可操作性
文献[5]	完全信息	1	1	未考虑	一般
文献[6]	完全信息	1	1	未考虑	较差
文献[9]	不完全信息	1	N	未考虑	一般
文献[12]	不完全信息	1	1	未考虑	一般
文中方法	不完全信息	N	N	考虑	较好

[1]	GE Bin,CHEN Xu,CHEN Gang. Fast hyper-chaotic image encryption algorithm using vector operation [J]. Journal of Xidian University, 2021, 48(6): 187-196.
[2]	DAI Mingjun,LI Xiaofeng,DENG Haiyan,CHEN Bin. Private information retrieval with low encoding/decoding complexity [J]. Journal of Xidian University, 2021, 48(6): 212-220.
[3]	XIE Lixia,BAI Yu. Information system business affecting impact evaluation method [J]. Journal of Xidian University, 2021, 48(4): 184-191.
[4]	WANG Xingxin,HU Wei,TAN Jing,ZHU Jiacheng,TANG Shibo. Correlation fault attack on AES [J]. Journal of Xidian University, 2021, 48(4): 192-199.
[5]	SONG Cheng,JIN Tong,NI Shuiping,HE Junyi,DU Shouheng. K-anonymous location privacy protection scheme for the mobile terminal [J]. Journal of Xidian University, 2021, 48(3): 138-145.
[6]	HE Shiyang,LI Hui,LI Fenghua. Optimization and implementation of the SM4 on FPGA [J]. Journal of Xidian University, 2021, 48(3): 155-162.
[7]	WANG Junxiang,HUANG Lin,ZHANG Ying,NI Jiangqun,LIN Lang. Algorithm for the detection of a low complexity contrast enhanced image source [J]. Journal of Xidian University, 2021, 48(1): 96-106.
[8]	LI Teng,CAO Shijie,YIN Siwei,WEI Dawei,MA Xindi,MA Jianfeng. Optimal method for the generation of the attack path based on the Q-learning decision [J]. Journal of Xidian University, 2021, 48(1): 160-167.
[9]	YANG Hongyu,ZENG Renyun. Method for assessment of network security situation with deep learning [J]. Journal of Xidian University, 2021, 48(1): 183-190.
[10]	CHE Xiaoliang,ZHOU Haonan,YANG Xiaoyuan,ZHOU Tanping,LIU Longfei,LI Ningbo. Efficient multi-key fully homomorphic encryption scheme from RLWE [J]. Journal of Xidian University, 2021, 48(1): 87-95.
[11]	LAN Yiqin,ZHANG Fangguo,TIAN Haibo. Using Monero to realize covert communication [J]. Journal of Xidian University, 2020, 47(5): 19-27.
[12]	SI Chengxiang,GAO Feng,ZHU Liehuang,GONG Guopeng,ZHANG Can,CHEN Zhuo,LI Ruiguang. Covert data transmission mechanism based on dynamic label in blockchain [J]. Journal of Xidian University, 2020, 47(5): 94-102.
[13]	HUANG Yuming,MA Jianfeng,LIU Zhiquan,FENG Bingwen,WEI Kaimin. Rule-based automatic program repair method [J]. Journal of Xidian University, 2020, 47(4): 117-123.
[14]	YANG Hongyu,ZHANG Xugao. Network security situation adaptive prediction model [J]. Journal of Xidian University, 2020, 47(3): 14-22.
[15]	YANG Luhui,LIU Guangjie,ZHAI Jiangtao,LIU Weiwei,BAI Huiwen,DAI Yuewei. Improved algorithm for detection of the malicious domain name based on the convolutional neural network [J]. Journal of Xidian University, 2020, 47(1): 37-43.

Optimal defense strategy selection based on the static Bayesian game

RichHTML

PDF (PC)

Like

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 4

References 12

Related Articles 15

Metrics

Comments

Recommended 10

防守行动	高级防守方			初级防守方
防守行动	Limit packets from port	√	√	√			√
Reinstall listener program	√			√	√	√
Uninstall delete Trojan			√
Renew data		√		√	√
Restart server	√
Limit SYN/ICMP packets	√	√	√			√
Delete suspicious account				√
Repair database	√		√
Correct homepage		√		√	√	√
Add physical resource		√	√		√