静态贝叶斯博弈主动防御策略选取方法

doi:10.3969/j.issn.1001-2400.2016.01.026

Abstract

Abstract:

Nowadays, the optimal defense strategies selection based on the incomplete information game model has many disadvantages, such as ignoring the type of the defender, using the simple cost quantitative method, and choosing defense strategies improperly. To solve the problem, this paper proposes an active defense strategy selection based on the static Bayesian game theory, and constructs the static Bayesian game model. The model considers the types of the attacker and the defender, and improves the classical strategies taxonomy and cost quantitative method by considering the strike back act of the defender and the success attack rate. Then, this paper calculates and comprehensively analyzes the Bayesian equilibrium of the game. Taking mixed strategies Bayesian equilibrium of the attacker as the defender's prediction of the attacker's action, this paper calculates the defense effectiveness of defense strategies and performs a defense strategies selection algorithm. Finally, an example is provided to analyze and demonstrate the effectiveness of the model and algorithm.

Key words: static Bayesian, active defense, mixed strategies equilibrium, network security

CLC Number:

TP309

WANG Jindong;YU Dingkun;ZHANG Hengwei;WANG Na. Active defense strategy selection based on the static Bayesian game[J].J4, 2016, 43(1): 144-150.

References

［1］ ZONOUZ S A, KHURANA H, SANDERS W H. RRE: A Game-theoretic Intrusion Response and Recovery Engine ［J］. IEEE Transactions on Parallel and Distributed Systems, 2014, 25(2): 395-406.
［2］ LIANG X N, XIAO Y. Game Theory for Network Security ［J］. IEEE Communications Surveys ＆ Tutorials, 2013, 15(1): 472-486.
［3］姜伟, 方滨兴, 田志宏, 等. 基于攻防博弈模型的网络安全测评和最优主动防御［J］. 计算机学报, 2009, 32(4): 817-825.
JIANG Wei, FANG Bingxing, TIAN Zhihong, et al. Evaluating Network Security and Optimal Active Defense Based on Attack-defense Game Model ［J］. Chinese Journal of Computers, 2009, 32(4): 817-825.
［4］姜伟, 方滨兴, 田志宏, 等. 基于攻防随机博弈模型的防御策略选取研究［J］. 计算机研究与发展, 2010, 47(10): 1714-1723.
JIANG Wei, FANG Bingxing, TIAN Zhihong, et al. Research on Defense Strategies Selection Based on Attack-defense Stochastic Game Model ［J］. Journal of Computer Research and Development, 2010, 47(10): 1714-1723.
［5］ YU M, LIU C, QIU X L, et al. Modelling and Analysis of Phishing Attack Using Stochastic Game Nets［C］//International Conference on Cyberspace Technology. London: IET, 2013: 300-305.
［6］ WANG C L, MIAO Q, DAI Y Q. Network Survivability Analysis Based on Stochastic Game Model［C］//Proceedings of the 4th International Conference on Multimedia Information Networking and Security. Washington: IEEE Computer Society, 2012: 99-104.
［7］林旺群, 王慧, 刘佳宏, 等. 基于非合作动态博弈的网络安全主动防御技术研究［J］. 计算机研究与发展, 2011, 48(2): 306-316.
LIN Wangqun, WANG Hui, LIU Jiahong et.al. Research on Active Defense Technology in Network Security Based on Non-Cooperative Dynamic Game Theory ［J］. Journal of Computer Research and Development, 2011, 48(2): 306-316.
［8］刘玉岭, 冯登国, 吴丽惠, 等. 基于静态贝叶斯博弈的蠕虫攻防策略绩效评估［J］. 软件学报, 2012, 23(3): 712-723.
LIU Yuling, FENG Dengguo, WU Lihui, et al. Performance Evaluation of Worm Attack and Defense Strategies Based on Static Bayesian Game ［J］. Journal of Software, 2012, 23(3):712-723.
［9］ NGUYEN K C, ALPCAN T, BASAR T. Security Games with Incomplete Information［C］//2009 IEEE International Conference on Communications. Piscataway: IEEE, 2009: 5199443.
［10］ LIU P, ZANG W Y, YU M. Incentive-based Modeling and Inference of Attacker Intent, Objectives, and Strategies［J］. ACM Transactions on Information and System Security, 2005, 8(1): 78-118.
［11］ LIU Y, COMANICIU C, MAN H. A Bayesian Game Approach for Intrusion Detection in Wireless Ad Hoc Networks ［C］//Proceedings of the 2006 Workshop on Game Theory for Communications and Networks. New York: ACM, 2006: 1190198.
［12］陈永强, 付钰, 吴晓平, 等. 基于非零和博弈模型的主动防御策略选取方法［J］. 计算机应用, 2013, 33(5): 1347-1349.
CHEN Yongqiang, FU Yu, WU Xiaoping. et al. Active Defense Strategy Selection Based on Non-zero-sum Attack-defense Game Model ［J］. Journal of Computer Applications. 2013, 33(5): 1347-1349.
［13］ KAYODE A B, BABATUNDE I G, ISRAEL H D. DGM Approach to Network Attacker and Defender Strategies［C］//8th International Conference for Internet Technology and Secured Transactions. Piscataway: IEEE Computer Society, 2013: 313-320.

[1]	LIU Huayuan,SU Yunfei,LI Ruilin,TANG Chaojing. Structure-statebased graybox Fuzzing technique [J]. Journal of Xidian University, 2021, 48(1): 117-123.
[2]	LI Teng,CAO Shijie,YIN Siwei,WEI Dawei,MA Xindi,MA Jianfeng. Optimal method for the generation of the attack path based on the Q-learning decision [J]. Journal of Xidian University, 2021, 48(1): 160-167.
[3]	YANG Hongyu,ZENG Renyun. Method for assessment of network security situation with deep learning [J]. Journal of Xidian University, 2021, 48(1): 183-190.
[4]	YANG Hongyu,ZHANG Xugao. Network security situation adaptive prediction model [J]. Journal of Xidian University, 2020, 47(3): 14-22.
[5]	WANG Zengguang,LU Yu,LI Xi,LI Zhiwei. Optimal defense strategy selection based on the static Bayesian game [J]. Journal of Xidian University, 2019, 46(5): 55-61.
[6]	YANG Baowang. Low-rate-denial-of-service attack detection by symbolic dynamics method [J]. Journal of Xidian University, 2018, 45(1): 140-144.
[7]	LIANG Hongquan;WU Wei. Secure link status routing protocol based on node trustworthiness [J]. Journal of Xidian University, 2016, 43(5): 121-127.
[8]	WANG Zhiqiang;ZHANG Yuqing;LIU Qixu;HUANG Tingpei. Algorithm for discovering SNMP protocol vulnerability [J]. J4, 2015, 42(4): 20-26+40.
[9]	GUO Jingjing;MA Jianfeng. Trust recommendation algorithm for the virtual community based Internet of Things(IoT) [J]. J4, 2015, 42(2): 52-57+179.
[10]	WANG Yichuan;MA Jianfeng;LU Di;ZHANG Liumei;MENG Xianjia. Cloud droplets freezing attack in cloud computing [J]. J4, 2014, 41(3): 116-122.
[11]	GUO Jianghong;MA Jianfeng;ZHANG Liumei;LU Di. Efficient encrypted data aggregation scheme for wireless sensor networks [J]. J4, 2013, 40(3): 95-101+120.
[12]	DU Zhi-qiang;SHEN Yu-long;MA Jian-feng;ZHOU Li-hua. Practical broadcast authentication protocol for sensor networks [J]. J4, 2010, 37(2): 305-310+325.
[13]	ZHOU Ye-jun;LI Hui;MA Jian-fen. Random network coding against the eavesdropping adversaries [J]. J4, 2009, 36(4): 696-701.
[14]	ZHOU Hua;MENG Xiang-ru;ZHANG Li;QIAO Xiang-dong. Proactive recovery algorithm in the distributed intrusion-tolerance system [J]. J4, 2009, 36(2): 378-384.
[15]	ZHAN Yang1;PANG Liao-jun1;ZHU Xiao-yan1;WANG Yu-min2. An autonomous distributed trust mode [J]. J4, 2008, 35(3): 469-473.

Active defense strategy selection based on the static Bayesian game

PDF (PC)

Like

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Metrics

Comments

Recommended 10