基于博弈论方法的移动目标防御机理研究

蔡桂林; 王宝生; 邢倩倩

doi:10.1631/FITEE.1601797

Your Location：

Home >

Browse articles >

基于博弈论方法的移动目标防御机理研究

常规文章 | Updated：2022-06-06

- 基于博弈论方法的移动目标防御机理研究
- Game theoretic analysis for the mechanism of moving target defense
- 信息与电子工程前沿（英文） 2017年18卷第12期页码：2017-2034
- Affiliations：
  
  College of Computer, National University of Defense Technology, Changsha 410073, China
- Author bio：
  
  [ "Gui-lin CAI, E-mail: caiguilin08@nudt.edu.cn" ]
  Bao-sheng WANG, E-mail: wangbaosheng@126.com
- Funds：
  
  Project supported by the National Basic Research Program (973) of China (No. 2012CB315906)
- DOI：10.1631/FITEE.1601797
  中图分类号： TP393
- 收稿：2016-12-09，
  
  修回：2017-12-20，
  
  纸质出版：2017-12
- Accepted：
Scan QR Code
蔡桂林, 王宝生, 邢倩倩. 基于博弈论方法的移动目标防御机理研究[J]. 信息与电子工程前沿（英文）, 2017,18(12):2017-2034.

CAI Gui-lin, WANG Bao-sheng, XING Qian-qian. Game theoretic analysis for the mechanism of moving target defense[J]. Frontiers of Information Technology & Electronic Engineering, 2017, 18(12): 2017-2034.
蔡桂林, 王宝生, 邢倩倩. 基于博弈论方法的移动目标防御机理研究[J]. 信息与电子工程前沿（英文）, 2017,18(12):2017-2034. DOI： 10.1631/FITEE.1601797.

CAI Gui-lin, WANG Bao-sheng, XING Qian-qian. Game theoretic analysis for the mechanism of moving target defense[J]. Frontiers of Information Technology & Electronic Engineering, 2017, 18(12): 2017-2034. DOI： 10.1631/FITEE.1601797.

摘要

移动目标防御（moving target defense

MTD）为改变当前网络易攻难守的局面提供了一种新的思路。目前已有大量的MTD技术，但对其防御机理的研究仍然缺乏。本文从两个角度对MTD技术的防御机理进行分析。首先，提出一种新的防御模型MP2R，从直观上描述MTD的主动性和有效性。然后，采用不完全信息动态博弈理论阐述和研究MTD技术的主动性和有效性。对可为服务器配备不同类型MTD技术的防御者与访问者（攻击者或正常用户）之间的行为交互进行建模，并求解出该模型的均衡结果及均衡条件。同时，将针对传统防御不完全信息动态博弈的已有模型作比较，说明MTD技术的主动性和有效性。此外，本文还分析了影响MTD方法主动性和有效性的因素。本文为理解MTD防御机理提供理论依据，并为改善MTD方法的有效性提供指导。

Abstract

Moving target defense (MTD) is a novel way to alter the asymmetric situation of attacks and defenses

and a lot of MTD studies have been carried out recently. However

relevant analysis for the defense mechanism of the MTD technology is still absent. In this paper

we analyze the defense mechanism of MTD technology in two dimensions. First

we present a new defense model named MP2R to describe the proactivity and effect of MTD technology intuitively. Second

we use the incomplete information dynamic game theory to verify the proactivity and effect of MTD technology. Specifically

we model the interaction between a defender who equips a server with different types of MTD techniques and a visitor who can be a user or an attacker

and analyze the equilibria and their conditions for these models. Then

we take an existing incomplete information dynamic game model for traditional defense and its equilibrium result as baseline for comparison

to validate the proactivity and effect of MTD technology. We also identify the factors that will influence the proactivity and effectiveness of the MTD approaches. This work gives theoretical support for understanding the defense process and defense mechanism of MTD technology and provides suggestions to improve the effectiveness of MTD approaches.

关键词

Keywords

references

E. Al-Shaer , Q. Duan , J.H. Jafarian . Random host mutation for moving target defense . Int. Conf. on Security and Privacy in Communication Systems , 2013 . p.310 - 327 . DOI: 10.1007/978-3-642-36883-7_19 http://doi.org/10.1007/978-3-642-36883-7_19 .

M. Azab , R. Hassan , M. Eltoweissy . ChameleonSoft: a moving target defense system . 7th Int. Conf. on Collaborative Computing: Networking, Applications and Worksharing , 2011 . p.241 - 250 . DOI: 10.4108/icst.collaboratecom.2011.247115 http://doi.org/10.4108/icst.collaboratecom.2011.247115 .

G. Cai , B. Wang , W. Hu , 等 . Moving target defense: state of the art and characteristics . Front. Inform. Technol. Electron. Eng. , 2016a . 17 ( 11 ): 1122 - 1153 . DOI: 10.1631/FITEE.1601321 http://doi.org/10.1631/FITEE.1601321 .

G. Cai , B. Wang , Y. Luo , 等 . Characterizing the running patterns of moving target defense mechanisms . 18th Int. Conf. on Advanced Communication Technology , 2016b . p.191 - 196 . DOI: 10.1109/ICACT.2016.7423324 http://doi.org/10.1109/ICACT.2016.7423324 .

T. Carroll , D. Grosu . A game theoretic investigation of deception in network security . Secur. Commun. Netw. , 2011 . 4 ( 10 ): 1162 - 1172 . DOI: 10.1002/sec.242 http://doi.org/10.1002/sec.242 .

T. Carroll , M. Crouse , E. Fulp , 等 . Analysis of network address shuffling as a moving target defense . IEEE Int. Conf. on Communications , 2014 . p.701 - 706 . DOI: 10.1109/ICC.2014.6883401 http://doi.org/10.1109/ICC.2014.6883401 .

K. Carter , J. Riordan , H. Okhravi . A game theoretic approach to strategy determination for dynamic platform defenses . 1st ACM Workshop on Moving Target Defense , 2014 . p.21 - 30 . DOI: 10.1145/2663474.2663478 http://doi.org/10.1145/2663474.2663478 .

M. Carvalho , J. Bradshaw , L. Bunch , 等 . Command and control requirements for moving-target defense . IEEE Intell. Syst. , 2012 . 27 ( 3 ): 79 - 85 . DOI: 10.1109/MIS.2012.45 http://doi.org/10.1109/MIS.2012.45 .

R. Colbaugh , K. Glass . Predictability-oriented defense against adaptive adversaries . IEEE Int. Conf. on Systems, Man, and Cybernetics , 2012 . p.2721 - 2727 . DOI: 10.1109/ICSMC.2012.6378159 http://doi.org/10.1109/ICSMC.2012.6378159 .

T. Hobson , H. Okhravi , D. Bigelow , 等 . On the challenges of effective movement . 1st ACM Workshop on Moving Target Defense , 2014 . p.41 - 50 . DOI: 10.1145/2663474.2663480 http://doi.org/10.1145/2663474.2663480 .

Y. Huang , A. Ghosh . Introducing diversity and uncertainty to create moving attack surfaces for web services . In : Jajodia S., Ghosh A., Swarup V., et al . (Eds.), Moving Target Defense: Creating Asymmetric Uncertainty for Cyber Threats. Springer New York, New York , 2011 . p.131 - 151 . DOI: 10.1007/978-1-4614-0977-9_8 http://doi.org/10.1007/978-1-4614-0977-9_8 .

S. Jajodia , A. Ghosh , V. Swarup , 等 . Moving Target Defense: Creating Asymmetric Uncertainty for Cyber Threats . Springer Science & Business Media. , 2011 .

C. Jia , A. Zhong , W. Zhang , 等 . Incomplete informational and dynamic game model in network security . J. Comput. Res. Dev. , 2006 . 43 ( Suppl. ): 530 - 533 . .

C. Liu , Y. Zhang , R. Chen . Research on dynamic model for network security based on artificial immunity . Int. J. Knowl. Lang. Process. , 2011 . 2 ( 3 ): 21 - 35 . .

K.W. Lye , J. Wing . Game strategies in network security . Int. J. Inform. Secur. , 2005 . 4 ( 1-2 ): 71 - 86 . DOI: 10.1007/s10207-004-0060-x http://doi.org/10.1007/s10207-004-0060-x .

P. Manadhata . Game theoretic approaches to attack surface shifting . In : Jajodia S., Ghosh A., Subrahmanian V., et al . (Eds.), Moving Target Defense Ⅱ: Application of Game Theory and Adversarial Modeling. Springer New York, New York , 2013 . p.1 - 13 . DOI: 10.1007/978-1-4614-5416-8_1 http://doi.org/10.1007/978-1-4614-5416-8_1 .

M. Manshaei , Q. Zhu , T. Alpcan , 等 . Game theory meets network security and privacy . ACM Comput. Surv. , 2013 . 45 ( 3 ): 25 DOI: 10.1145/2480741.2480742 http://doi.org/10.1145/2480741.2480742 .

W.C. Moody , H. Hu , A. Apon . Defensive maneuver cyber platform modeling with stochastic Petri Nets . Int. Conf. on Collaborative Computing: Networking, Applications and Worksharing , 2014 . p.531 - 538 . DOI: 10.4108/icst.collaboratecom.2014.257559 http://doi.org/10.4108/icst.collaboratecom.2014.257559 .

NITRD . National Cyber Leap Year Summit 2009 . Co-chairs' Report , 2009 . https://www.nitrd.gov/fileupload/files/National_Cyber_Leap_Year_Summit_2009_CoChairs_Report.pdf https://www.nitrd.gov/fileupload/files/National_Cyber_Leap_Year_Summit_2009_CoChairs_Report.pdf .

NITRD . NITRD CSIA IWG Cybersecurity GameChange Research and Development Recommendations . https://www.nitrd.gov/cybersecurity/ https://www.nitrd.gov/cybersecurity/ , 2010 .

H. Okhravi , T. Hobson , D. Bigelow , 等 . Finding focus in the blur of moving-target techniques . IEEE Secur. Priv. , 2014 . 12 ( 2 ): 16 - 26 . DOI: 10.1109/MSP.2013.137 http://doi.org/10.1109/MSP.2013.137 .

A. Prakash , M. Wellman . Empirical game-theoretic analysis for moving target defense . 2nd ACM Workshop on Moving Target Defense , 2015 . p.57 - 65 . DOI: 10.1145/2808475.2808483 http://doi.org/10.1145/2808475.2808483 .

L. Shi , C. Jia , S. Lu . DoS evading mechanism upon service hopping . IFIP Int. Conf. on Network and Parallel Computing Workshops , 2007 . p.119 - 122 . DOI: 10.1109/NPC.2007.59 http://doi.org/10.1109/NPC.2007.59 .

L. Shi , C. Jia , S. Lv . A game theoretic analysis of service hopping mechanism for DoS defense . J. Electron. Inform. Techn. , 2009 . 31 ( 1 ): 228 - 232 . .

V.E. Urias , W.M.S. Stout , C. Loverro . Computer network deception as a moving target defense . Int. Carnahan Conf. on Security Technology , 2015 . p.1 - 6 . DOI: 10.1109/CCST.2015.7389665 http://doi.org/10.1109/CCST.2015.7389665 .

S. Vadlamudi , S. Sengupta , S. Kambhampati , 等 . Moving target defense for web applications using Bayesian Stackelberg games . arXiv:1602.07024. , 2016 .

M.L. Winterrose , K.M. Carter . Strategic evolution of adversaries against temporal platform diversity active cyber defenses . Proc. Symp. on Agent Directed Simulation , 2014 . p.9 .

M.L. Winterrose , K.M. Carter , N. Wagner , 等 . Adaptive attacker strategy development against moving target cyber defenses . arXiv:1407.8540. , 2014 .

Q. Zhu , T. Başar . Game-theoretic approach to feedback-driven multi-stage moving target defense . LNCS , 2013 . 8252 246 - 263 . DOI: 10.1007/978-3-319-02786-9_15 http://doi.org/10.1007/978-3-319-02786-9_15 .

R. Zhuang , S. DeLoach , X. Ou . Towards a theory of moving target defense . 1st ACM Workshop on Moving Target Defense , 2014 . p.31 - 40 . DOI: 10.1145/2663474.2663479 http://doi.org/10.1145/2663474.2663479 .

浏览量

Downloads

CSCD

文章被引用时，请邮件提醒。

Submit

工具集

关联资源

An anti-collision algorithm for robotic search-and-rescue tasks in unknown dynamic environments

Automatic discovery of stateful variables in network protocol software based on replay analysis

Resource allocation for network profit maximization in NOMA-based F-RANs: a game-theoretic approach

A combination weighting model based on iMOEA/D-DE

Decentralized multi-agent reinforcement learning with networked agents: recent advances