Game Theoretic Approaches to Mitigate Cloud Security Risks: An Initial Insight

Temghart, Abdelkarim Ait; Omar, Driss Ait; Outanoute, M’hamed; Marwan, Mbarek

doi:10.1007/978-3-030-76508-8_24

Cited by 4 publications

(2 citation statements)

References 38 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Although shared infrastructure and multitenancy are improving the redundancy and reliability of the cloud, users have limited visibility and control over online business data and applications. As a direct result of these virtualized services, data security is still a critical challenge in the cloud computing paradigm, and it becomes particularly serious because the data are located in diferent virtual machines (VMs) [4,5]. One major problem with cloud security is that attackers can inject malicious queries using various cyberattacks such as credential stufng, Denial of service (DoS), Spectre and Meltdown, SQL injection, Cross-Site Scripting (XSS), CrossSite Request Forgery (CSRF), etc [6].…”

Section: Introductionmentioning

confidence: 99%

“…(1) We identify and quantify potential security threats in cloud computing environments to build a cybersecurity model (2) We use Stackelberg games to model the attackerdefender strategic interaction in cloud computing, especially when using a limited number of resources (3) We develop a model of imperfect competition based on a noncooperative game to fnd an optimal defender strategy (4) We propose a model of bounded rationality based on the QRE so that all players always make their decisions with a limited amount of information about security threats and countermeasures (5) We conduct a comprehensive evaluation of the accuracy of the modeling defense strategy and its efect on the operating proft margin Te rest of this paper is structured as follows. In Section 2, we formalized the system model and security requirements for cloud-shared resources.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Stackelberg Security Game for Optimizing Cybersecurity Decisions in Cloud Computing

Ait Temghart,

Marwan,

Baslam

2023

Security and Communication Networks

View full text Add to dashboard Cite

As it is difficult to cover all cybersecurity threats, an optimal defense strategy is one of the focal issues in cloud computing due to its dynamic abstraction and scalability. On this basis, Stackelberg security games (SSG) have received significant attention for their better deployment of limited security. To deal with uncertainty and incomplete information, we introduce a modified quantal response (Mod-QR) approach that incorporates bounded rationality and preference into the decision-making process. Formally, this can be done by using the quantal response equilibrium (QRE) framework to find a trade-off between the effectiveness and operating costs of cloud computing. In this case, the most effective countermeasures to defend the cloud can be viewed as a mixed strategy in which all the actions of the defender are played with a nonzero probability. This framework has been evaluated using an experimental study on MATLAB optimization toolbox to understand the behavioral aspects of cybersecurity actors and then to proactively protect cloud computing.

show abstract

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%