Game theoretic analysis for the mechanism of moving target defense

CAI Gui-lin; WANG Bao-sheng; XING Qian-qian

doi:10.1631/FITEE.1601797

Your Location：

Home >

Browse articles >

Game theoretic analysis for the mechanism of moving target defense

Regular Papers | Updated：2022-06-06

- Game theoretic analysis for the mechanism of moving target defense
- 基于博弈论方法的移动目标防御机理研究
- Frontiers of Information Technology & Electronic Engineering Vol. 18, Issue 12, Pages: 2017-2034(2017)
- Affiliations：
  
  College of Computer, National University of Defense Technology, Changsha 410073, China
- Author bio：
  
  [ "Gui-lin CAI, E-mail: caiguilin08@nudt.edu.cn" ]
  Bao-sheng WANG, E-mail: wangbaosheng@126.com
- Funds：
- DOI：10.1631/FITEE.1601797
  CLC： TP393
- Received：09 December 2016，
  
  Revised：2017-12-20，
  
  Published：2017-12
- Accepted：
Scan QR Code
CAI Gui-lin, WANG Bao-sheng, XING Qian-qian. Game theoretic analysis for the mechanism of moving target defense[J]. Frontiers of Information Technology & Electronic Engineering, 2017, 18(12): 2017-2034.
DOI：

CAI Gui-lin, WANG Bao-sheng, XING Qian-qian. Game theoretic analysis for the mechanism of moving target defense[J]. Frontiers of Information Technology & Electronic Engineering, 2017, 18(12): 2017-2034. DOI： 10.1631/FITEE.1601797.

摘要

移动目标防御（moving target defense

MTD）为改变当前网络易攻难守的局面提供了一种新的思路。目前已有大量的MTD技术，但对其防御机理的研究仍然缺乏。本文从两个角度对MTD技术的防御机理进行分析。首先，提出一种新的防御模型MP2R，从直观上描述MTD的主动性和有效性。然后，采用不完全信息动态博弈理论阐述和研究MTD技术的主动性和有效性。对可为服务器配备不同类型MTD技术的防御者与访问者（攻击者或正常用户）之间的行为交互进行建模，并求解出该模型的均衡结果及均衡条件。同时，将针对传统防御不完全信息动态博弈的已有模型作比较，说明MTD技术的主动性和有效性。此外，本文还分析了影响MTD方法主动性和有效性的因素。本文为理解MTD防御机理提供理论依据，并为改善MTD方法的有效性提供指导。

Abstract

Moving target defense (MTD) is a novel way to alter the asymmetric situation of attacks and defenses

and a lot of MTD studies have been carried out recently. However

relevant analysis for the defense mechanism of the MTD technology is still absent. In this paper

we analyze the defense mechanism of MTD technology in two dimensions. First

we present a new defense model named MP2R to describe the proactivity and effect of MTD technology intuitively. Second

we use the incomplete information dynamic game theory to verify the proactivity and effect of MTD technology. Specifically

we model the interaction between a defender who equips a server with different types of MTD techniques and a visitor who can be a user or an attacker

and analyze the equilibria and their conditions for these models. Then

we take an existing incomplete information dynamic game model for traditional defense and its equilibrium result as baseline for comparison

to validate the proactivity and effect of MTD technology. We also identify the factors that will influence the proactivity and effectiveness of the MTD approaches. This work gives theoretical support for understanding the defense process and defense mechanism of MTD technology and provides suggestions to improve the effectiveness of MTD approaches.

关键词

Keywords

references

E. Al-Shaer , Q. Duan , J.H. Jafarian . Random host mutation for moving target defense . Int. Conf. on Security and Privacy in Communication Systems , 2013 . p.310 - 327 . DOI: 10.1007/978-3-642-36883-7_19 http://doi.org/10.1007/978-3-642-36883-7_19 .

M. Azab , R. Hassan , M. Eltoweissy . ChameleonSoft: a moving target defense system . 7th Int. Conf. on Collaborative Computing: Networking, Applications and Worksharing , 2011 . p.241 - 250 . DOI: 10.4108/icst.collaboratecom.2011.247115 http://doi.org/10.4108/icst.collaboratecom.2011.247115 .

G. Cai , B. Wang , W. Hu , 等 . Moving target defense: state of the art and characteristics . Front. Inform. Technol. Electron. Eng. , 2016a . 17 ( 11 ): 1122 - 1153 . DOI: 10.1631/FITEE.1601321 http://doi.org/10.1631/FITEE.1601321 .

G. Cai , B. Wang , Y. Luo , 等 . Characterizing the running patterns of moving target defense mechanisms . 18th Int. Conf. on Advanced Communication Technology , 2016b . p.191 - 196 . DOI: 10.1109/ICACT.2016.7423324 http://doi.org/10.1109/ICACT.2016.7423324 .

T. Carroll , D. Grosu . A game theoretic investigation of deception in network security . Secur. Commun. Netw. , 2011 . 4 ( 10 ): 1162 - 1172 . DOI: 10.1002/sec.242 http://doi.org/10.1002/sec.242 .

T. Carroll , M. Crouse , E. Fulp , 等 . Analysis of network address shuffling as a moving target defense . IEEE Int. Conf. on Communications , 2014 . p.701 - 706 . DOI: 10.1109/ICC.2014.6883401 http://doi.org/10.1109/ICC.2014.6883401 .

K. Carter , J. Riordan , H. Okhravi . A game theoretic approach to strategy determination for dynamic platform defenses . 1st ACM Workshop on Moving Target Defense , 2014 . p.21 - 30 . DOI: 10.1145/2663474.2663478 http://doi.org/10.1145/2663474.2663478 .

M. Carvalho , J. Bradshaw , L. Bunch , 等 . Command and control requirements for moving-target defense . IEEE Intell. Syst. , 2012 . 27 ( 3 ): 79 - 85 . DOI: 10.1109/MIS.2012.45 http://doi.org/10.1109/MIS.2012.45 .

R. Colbaugh , K. Glass . Predictability-oriented defense against adaptive adversaries . IEEE Int. Conf. on Systems, Man, and Cybernetics , 2012 . p.2721 - 2727 . DOI: 10.1109/ICSMC.2012.6378159 http://doi.org/10.1109/ICSMC.2012.6378159 .

T. Hobson , H. Okhravi , D. Bigelow , 等 . On the challenges of effective movement . 1st ACM Workshop on Moving Target Defense , 2014 . p.41 - 50 . DOI: 10.1145/2663474.2663480 http://doi.org/10.1145/2663474.2663480 .

Y. Huang , A. Ghosh . Introducing diversity and uncertainty to create moving attack surfaces for web services . In : Jajodia S., Ghosh A., Swarup V., et al . (Eds.), Moving Target Defense: Creating Asymmetric Uncertainty for Cyber Threats. Springer New York, New York , 2011 . p.131 - 151 . DOI: 10.1007/978-1-4614-0977-9_8 http://doi.org/10.1007/978-1-4614-0977-9_8 .

S. Jajodia , A. Ghosh , V. Swarup , 等 . Moving Target Defense: Creating Asymmetric Uncertainty for Cyber Threats . Springer Science & Business Media. , 2011 .

C. Jia , A. Zhong , W. Zhang , 等 . Incomplete informational and dynamic game model in network security . J. Comput. Res. Dev. , 2006 . 43 ( Suppl. ): 530 - 533 . .

C. Liu , Y. Zhang , R. Chen . Research on dynamic model for network security based on artificial immunity . Int. J. Knowl. Lang. Process. , 2011 . 2 ( 3 ): 21 - 35 . .

K.W. Lye , J. Wing . Game strategies in network security . Int. J. Inform. Secur. , 2005 . 4 ( 1-2 ): 71 - 86 . DOI: 10.1007/s10207-004-0060-x http://doi.org/10.1007/s10207-004-0060-x .

P. Manadhata . Game theoretic approaches to attack surface shifting . In : Jajodia S., Ghosh A., Subrahmanian V., et al . (Eds.), Moving Target Defense Ⅱ: Application of Game Theory and Adversarial Modeling. Springer New York, New York , 2013 . p.1 - 13 . DOI: 10.1007/978-1-4614-5416-8_1 http://doi.org/10.1007/978-1-4614-5416-8_1 .

M. Manshaei , Q. Zhu , T. Alpcan , 等 . Game theory meets network security and privacy . ACM Comput. Surv. , 2013 . 45 ( 3 ): 25 DOI: 10.1145/2480741.2480742 http://doi.org/10.1145/2480741.2480742 .

W.C. Moody , H. Hu , A. Apon . Defensive maneuver cyber platform modeling with stochastic Petri Nets . Int. Conf. on Collaborative Computing: Networking, Applications and Worksharing , 2014 . p.531 - 538 . DOI: 10.4108/icst.collaboratecom.2014.257559 http://doi.org/10.4108/icst.collaboratecom.2014.257559 .

NITRD . National Cyber Leap Year Summit 2009 . Co-chairs' Report , 2009 . https://www.nitrd.gov/fileupload/files/National_Cyber_Leap_Year_Summit_2009_CoChairs_Report.pdf https://www.nitrd.gov/fileupload/files/National_Cyber_Leap_Year_Summit_2009_CoChairs_Report.pdf .

NITRD . NITRD CSIA IWG Cybersecurity GameChange Research and Development Recommendations . https://www.nitrd.gov/cybersecurity/ https://www.nitrd.gov/cybersecurity/ , 2010 .

H. Okhravi , T. Hobson , D. Bigelow , 等 . Finding focus in the blur of moving-target techniques . IEEE Secur. Priv. , 2014 . 12 ( 2 ): 16 - 26 . DOI: 10.1109/MSP.2013.137 http://doi.org/10.1109/MSP.2013.137 .

A. Prakash , M. Wellman . Empirical game-theoretic analysis for moving target defense . 2nd ACM Workshop on Moving Target Defense , 2015 . p.57 - 65 . DOI: 10.1145/2808475.2808483 http://doi.org/10.1145/2808475.2808483 .

L. Shi , C. Jia , S. Lu . DoS evading mechanism upon service hopping . IFIP Int. Conf. on Network and Parallel Computing Workshops , 2007 . p.119 - 122 . DOI: 10.1109/NPC.2007.59 http://doi.org/10.1109/NPC.2007.59 .

L. Shi , C. Jia , S. Lv . A game theoretic analysis of service hopping mechanism for DoS defense . J. Electron. Inform. Techn. , 2009 . 31 ( 1 ): 228 - 232 . .

V.E. Urias , W.M.S. Stout , C. Loverro . Computer network deception as a moving target defense . Int. Carnahan Conf. on Security Technology , 2015 . p.1 - 6 . DOI: 10.1109/CCST.2015.7389665 http://doi.org/10.1109/CCST.2015.7389665 .

S. Vadlamudi , S. Sengupta , S. Kambhampati , 等 . Moving target defense for web applications using Bayesian Stackelberg games . arXiv:1602.07024. , 2016 .

M.L. Winterrose , K.M. Carter . Strategic evolution of adversaries against temporal platform diversity active cyber defenses . Proc. Symp. on Agent Directed Simulation , 2014 . p.9 .

M.L. Winterrose , K.M. Carter , N. Wagner , 等 . Adaptive attacker strategy development against moving target cyber defenses . arXiv:1407.8540. , 2014 .

Q. Zhu , T. Başar . Game-theoretic approach to feedback-driven multi-stage moving target defense . LNCS , 2013 . 8252 246 - 263 . DOI: 10.1007/978-3-319-02786-9_15 http://doi.org/10.1007/978-3-319-02786-9_15 .

R. Zhuang , S. DeLoach , X. Ou . Towards a theory of moving target defense . 1st ACM Workshop on Moving Target Defense , 2014 . p.31 - 40 . DOI: 10.1145/2663474.2663479 http://doi.org/10.1145/2663474.2663479 .

Views

Downloads

CSCD

Alert me when the article has been cited

Submit

Tools

Publicity Resources

An anti-collision algorithm for robotic search-and-rescue tasks in unknown dynamic environments

Automatic discovery of stateful variables in network protocol software based on replay analysis

Resource allocation for network profit maximization in NOMA-based F-RANs: a game-theoretic approach

A combination weighting model based on iMOEA/D-DE

Decentralized multi-agent reinforcement learning with networked agents: recent advances

Related Author

Zhen WANG

Tongyue LI

Huanhuan YANG

Dianxi SHI

Yang CHEN

Jinshu SU

Runhao LIU

Bo YU

Related Institution

Intelligent Game and Decision Lab

Tianjin Artificial Intelligence Innovation Center

School of Computer Science, Peking University

Academy of Military Science

College of Computer Science and Technology, National University of Defense Technology

Chat

Address：Zhejiang University Press, 148 Tianmushan Road, Hangzhou, China Postal code：310028
Tel：+86-571-88273162 Email：fitee@zju.edu.cn
It is recommended to read the content of this site in Chrome&IE9+. Please switch to extreme mode in browser 360.
Cookies We use cookies to help provide and enhance our service and tailor content. By continuing, you agree to the use of cookies.

⁰