skip to main content
OSTI.GOV title logo U.S. Department of Energy
Office of Scientific and Technical Information

Title: Discrete game-theoretic analysis of defense in correlated cyber-physical systems

Journal Article · · Annals of Operations Research
ORCiD logo [1];  [2]; ORCiD logo [3]
  1. Texas A & M Univ., Kingsville, TX (United States)
  2. State Univ. of New York (SUNY), Buffalo, NY (United States)
  3. Oak Ridge National Lab. (ORNL), Oak Ridge, TN (United States)

A cyber-physical system (CPS) is composed of a discrete number of cyber and physical components and subject to internal failures and external disruptions. The functionality of CPS therefore is determined not only by cyber and physical components but the adversary’s attacker strategy. We characterize the effect of cyber-physical interdependency on the CPS survival probability using a product-form function with cyber and physical exponential correlation coefficients. We model simultaneous and sequential discrete games between the provider and attacker on a CPS infrastructure to analyze its survivability and reinforcement strategy at Nash equilibrium. Our results show that the cyber and physical correlation coefficients can significantly affect CPS survival probability. In general, the provider’s cyber- (or physical-) reinforcement level increases as the cyber- (or physical-) attack level increases. In each of cyber and physical domains, the reinforcement level first increases then decreases in its own correlation coefficient, probability of successful component attacks, and maximum level of available resources, but decreases in the correlation coefficient of the other domain. We apply this game-theoretic analysis to a cloud computing infrastructure, and show that its residual capacity is relatively high when the attacker has no information about the distribution of servers. Finally, a high level of survival probability does not necessarily lead to high utility.

Research Organization:
Oak Ridge National Lab. (ORNL), Oak Ridge, TN (United States)
Sponsoring Organization:
USDOE Office of Science (SC), Advanced Scientific Computing Research (ASCR)
Grant/Contract Number:
AC05-00OR22725
OSTI ID:
1649008
Journal Information:
Annals of Operations Research, Vol. 10, Issue TBD; ISSN 0254-5330
Publisher:
Springer NatureCopyright Statement
Country of Publication:
United States
Language:
English

References (30)

The game-theoretic model and experimental investigation of cyber wargaming
  • Colbert, Edward JM; Kott, Alexander; Knachel, Lawrence P.
  • The Journal of Defense Modeling and Simulation: Applications, Methodology, Technology, Vol. 17, Issue 1 https://doi.org/10.1177/1548512918795061
journal August 2018
False targets vs. redundancy in homogeneous parallel systems journal February 2009
Network Games: Theory, Models, and Dynamics journal March 2011
Risk Assessment for Physical and Cyber Attacks on Critical Infrastructures conference January 2005
Governments' and Terrorists' Defense and Attack in a T -Period Game journal March 2011
Defense Strategies for Asymmetric Networked Systems with Discrete Components journal May 2018
Defense Strategies for Multi-Site Cloud Computing Server Infrastructures
  • Rao, Nageswara S. V.; Ma, Chris Y. T.; He, Fei
  • ICDCN '18: 19th International Conference on Distributed Computing and Networking, Proceedings of the 19th International Conference on Distributed Computing and Networking https://doi.org/10.1145/3154273.3154344
conference January 2018
A Sequential Game of Defense and Attack on an Interdependent System of Systems
  • He, Fei; Agwuegbo, Chiamaka; Rao, Nageswara S. V.
  • 2018 International Conference on Information Fusion (FUSION), 2018 21st International Conference on Information Fusion (FUSION) https://doi.org/10.23919/ICIF.2018.8455314
conference July 2018
Critical infrastructure protection using secrecy – A discrete simultaneous game journal April 2015
Non-Cooperative Games journal September 1951
Cyber–Physical Security of a Smart Grid Infrastructure journal January 2012
Nature plays with dice – terrorists do not: Allocating resources to counter strategic versus probabilistic risks journal January 2009
Interdependent Risk in Interacting Infrastructure Systems conference January 2007
A game-theoretic approach to model and quantify the security of cyber-physical systems journal June 2017
Game-theoretic resilience analysis of Cyber-Physical Systems conference August 2013
Cyber–Physical Correlation Effects in Defense Games for Large Discrete Infrastructures journal July 2018
Cloud computing infrastructure robustness: A game theory approach conference January 2012
Small Cluster in Cyber Physical Systems: Network Topology, Interdependence and Cascading Failures journal August 2015
Game theory meets network security and privacy journal June 2013
Modeling and Vulnerability Analysis of Cyber-Physical Power Systems Considering Network Topology and Power Flow Properties journal January 2017
Modeling cyber-physical attacks based on probabilistic colored Petri nets and mixed-strategy game theory journal March 2017
A Survey of Game Theory as Applied to Network Security conference January 2010
RRE: A game-theoretic intrusion Response and Recovery Engine conference June 2009
Modelling ‘contracts’ between a terrorist group and a government in a sequential game journal June 2012
Defending Critical Infrastructure journal December 2006
Cyber-physical attacks in power networks: Models, fundamental limitations and monitor design conference December 2011
Modeling secrecy and deception in a multiple-period attacker–defender signaling game journal June 2010
Electricity infrastructure security: Toward reliable, resilient and secure cyber-physical power and energy systems conference July 2010
RRE: A Game-Theoretic Intrusion Response and Recovery Engine journal February 2014
Non-Cooperative Games journal January 2014