2020/08/07 by Abhishek N. Kulkarni, Jie Fu, Kulkarni, Abhishek N. +1 · 2 citations
Computer Science · Social Sciences · #Advanced Malware Detection Techniques #Artificial Intelligence (cs.AI) #Computer Science and Game Theory (cs.GT) #Cryptography and Security (cs.CR) #Cybersecurity and Cyber Warfare Studies #FOS: Computer and information sciences #Information and Cyber Security #Logic in Computer Science (cs.LO) #Networking and Internet Architecture (cs.NI)
paper · pdf · doi:10.48550/arxiv.2008.03210
openalex publication_date 2020/08/07 · openalex created_date 2020/08/13 · openalex updated_date 2026/07/28
In this chapter, we present an approach using formal methods to synthesize reactive defense strategy in a cyber network, equipped with a set of decoy systems. We first generalize formal graphical security models--attack graphs--to incorporate defender's countermeasures in a game-theoretic model, called an attack-defend game on graph. This game captures the dynamic interactions between the defender and the attacker and their defense/attack objectives in formal logic. Then, we introduce a class of hypergames to model asymmetric information created by decoys in the attacker-defender interactions. Given qualitative security specifications in formal logic, we show that the solution concepts from hypergames and reactive synthesis in formal methods can be extended to synthesize effective dynamic defense strategy using cyber deception. The strategy takes the advantages of the misperception of the attacker to ensure security specification is satisfied, which may not be satisfiable when the information is symmetric.