Journal
IEEE TRANSACTIONS ON NETWORK SCIENCE AND ENGINEERING
Volume 8, Issue 3, Pages 2001-2013Publisher
IEEE COMPUTER SOC
DOI: 10.1109/TNSE.2020.3040247
Keywords
Security; Organizations; Investment; Servers; Nash equilibrium; Maintenance engineering; Loss measurement; Advanced persistent threat; DBAR-based APT defense mechanism; DBARS problem; data backup and recovery; differential game; nash equilibrium; software-defined networking
Funding
- National Natural Science Foundation of China [61 572 006]
- Chongqing Basic Research and Front Exploration Project [cstc2018jcyjA3093]
- Chongqing Key Laboratory of Mobile Communications Technology [cqupt-mct-201901]
- Australian Research Council [LP170100458]
Ask authors/readers for more resources
The paper introduces a novel APT defense mechanism based on DBAR techniques, aiming to address the shortcomings of the conventional DAR-based APT defense mechanism and demonstrate efficiency in practical implementation.
Advanced persistent threat (APT) as a generic highly sophisticated cyber attack poses a severe threat to organizational data security. Since the conventional detection and repair (DAR)-based APT defense mechanism has several conspicuous drawbacks, it is imperative to develop a more effective and efficient APT defense mechanism. Based on the data backup and recovery (DBAR) techniques developed in the field of disaster recovery, we propose a novel APT defense mechanism referred to as DBAR-based APT defense mechanism, which can overcome the main drawbacks of the DAR-based APT defense mechanism and is expected to be implementable efficiently in the software-defined networking (SDN) paradigm. Under the new mechanism, we study the problem of finding a cost-effective DBAR strategy. Based on a novel dynamic model characterizing the evolution of the expected security status of the organizational network, we reduce the problem to a differential game-theoretic problem, which is aimed to seek a cost-effective DBAR strategy in terms of the Nash equilibrium solution concept. Next, we derive the optimality system of the problem. Extensive comparative experiments show that the DBAR strategy obtained from the optimality system is cost-effective in the sense of Nash equilibrium solution concept.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available