Diversifying Deception: Game-Theoretic Models for Two-Sided Deception and Initial Human Studies

Strategic Honeypot Allocation in Dynamic Networks: A Game-Theoretic Approach for Enhanced Cybersecurity

“…Fig. 1 shows a 7-node tree network (attack graph) that has one entry node (1), four intermediate nodes (2,3,4,6), and two target nodes (5,7). In this network, there is one available path for reaching target node (7), while there exist three paths for reaching target node (5).…”

“…1 shows a 7-node tree network (attack graph) that has one entry node (1), four intermediate nodes (2,3,4,6), and two target nodes (5,7). In this network, there is one available path for reaching target node (7), while there exist three paths for reaching target node (5). Due to node mobility, nodes 4, 6, 2, and 3 are likely to lose communications in the future leading to a new topology (i.e., state).…”

“…Future mobility information shall impact the initial honeypot allocation strategy deployed by the defender. For instance, after two transitions, there is a possibility that node (7) will be isolated and secured by itself, and hence the defender will have no incentive to protect it via a honeypot. Our model quantifies and captures the advantages of considering the network's future evolution.…”

“…We solve (7) to find the optimal policy, by iterating over the value function following the Q-minimax algorithm introduced in (Littman 1994).…”

“…Cyber deception represents an advanced proactive technology in the field of cyber defense. Its purpose is to provide attackers with credible yet misleading information, effectively leading them astray (Miah et al 2022). While deception techniques have traditionally been employed in the physical domain as a tactic of traditional warfare, their application has extended to the realm of cyberspace, serving as a means of intrusion detection and defense.…”