Partially Observable Stochastic Games for Cyber Deception Against Network Epidemic

  • Conference paper
  • First Online:
Decision and Game Theory for Security (GameSec 2020)

Part of the book series: Lecture Notes in Computer Science ((LNSC,volume 12513))

Included in the following conference series:

  • 1238 Accesses

Abstract

A Decentralized Denial of Service is an attack done by an agent capable to control the spread of a malware. This is a combination of epidemiological and conflictual aspects between several decision makers. There exists in the literature papers that study (non oriented) epidemics and papers that study network attacks regardless the epidemiological aspect. We put together the two aspects and provide a new game theoretical model which is part of the family of partially observable stochastic games (POSG) but with particular features. We prove the consistency of heuristic search value iteration (HSVI) based algorithms. Our framework is applied to optimally design a cyber deception technique based on honeypots in order to control an epidemic cyber-attack of a network by a strategic attacker. Some basic simulations are proposed to illustrate the framework described in this work-in-progress paper.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Subscribe and save

Springer+ Basic
EUR 32.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or Ebook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
EUR 29.95
Price includes VAT (Germany)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
EUR 42.79
Price includes VAT (Germany)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
EUR 53.49
Price includes VAT (Germany)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free ship** worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

Notes

  1. 1.

    Unlike in [6], we consider the use of the world “resistant”: (1) instead of “recovered” to keep in thought the non-vulnerability of the device; (2) instead of “removed” to keep in thought that the device is still in the game scenario.

  2. 2.

    Since the number of infected node cannot exceed \(\left| V\right| \), the probability at each time-slot that all infected nodes become susceptible is greater or equal to \(\left( 1-\alpha \right) ^{\left| V\right| }\). So, at a certain time-slot, there will be no infected node and later all node will be resistant. There is no payoff from this time-slot and consequently the total expected reward converges even with discount factor \(\gamma =1\).

References

  1. Antonakakis, M., et al.: Understanding the mirai botnet. In: 26th USENIX Security Symposium (USENIX Security 17), pp. 1093–1110. USENIX Association, Vancouver (2017). https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/antonakakis

  2. Colizza, V., Vespignani, A.: Invasion threshold in heterogeneous meta population networks. Phys. Rev. Lett. 99, 148701 (2007)

    Article  Google Scholar 

  3. Horák, K., Bošanský, B., Pĕchouček, M.: Heuristic search value iteration for one-sided partially observable stochastic games. In: Proceedings of the 1st International Joint Conference on Artificial Intelligence, vol. 31, pp. 558–564 (2017). 978-1-57735-780-3

    Google Scholar 

  4. Kartir, D., Nayyar, A.: Stochastic zero-sum games with asymmetric information (2019)

    Google Scholar 

  5. Kim, J., Radhakrishnan, S., Dhall, S.K.: Measurement and analysis of worm propagation on internet network topology (2004)

    Google Scholar 

  6. Kiss, I.Z., Miller, J.C., Simon, P.L.: Mathematics of Epidemics on Networks. IAM, vol. 46. Springer, Cham (2017). https://doi.org/10.1007/978-3-319-50806-1

    Book  MATH  Google Scholar 

  7. Tsemogne, O., Hayel, Y., Kamhoua, C., Degoue, G.: Epidemic model and partially observable stochastic games for cyber deception. draft full version (2020). https://drive.google.com/file/d/1k4Qs0d38cmYXfxV5YE6D1SJqDjqqukE6/view?usp=sharing

  8. Pawlick, J., Colbert, E., Zhu, Q.: A game-theoretic taxonomy and survey of defensive deception for cybersecurity and privacy. ACM Comput. Surv. 52, 1–28 (2019)

    Article  Google Scholar 

  9. Roy, S., Ellis, C., Shiva, S., Dasgupta, D., V. Shandilya, C.W.: A survey of game theory as applied to network security, pp. 1–10 (2010)

    Google Scholar 

  10. Smith, T., Simmons, R.: Heuristic search value iteration for pomdps. In: Proceedings of UAI (2012)

    Google Scholar 

  11. Wiggers, A., Oliehoek, F., Roijers, D.: Structure in the value function of zero-sum games of incomplete information (2015)

    Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Yezekael Hayel .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2020 Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Tsemogne, O., Hayel, Y., Kamhoua, C., Deugoue, G. (2020). Partially Observable Stochastic Games for Cyber Deception Against Network Epidemic. In: Zhu, Q., Baras, J.S., Poovendran, R., Chen, J. (eds) Decision and Game Theory for Security. GameSec 2020. Lecture Notes in Computer Science(), vol 12513. Springer, Cham. https://doi.org/10.1007/978-3-030-64793-3_17

Download citation

  • DOI: https://doi.org/10.1007/978-3-030-64793-3_17

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-030-64792-6

  • Online ISBN: 978-3-030-64793-3

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Navigation