A game-based intrusion detection mechanism to confront internal attackers

Computers and Security

Volumn 29, Issue 8, 2010, Pages 859-874

  Kantzavelou, Ioanna ^a,b   Katsikas, Sokratis ^c  

^a UNIVERSITY OF THE AEGEAN   (Greece)

^b UNIVERSITY OF WEST ATTICA   (Greece)

^c UNIVERSITY OF PIRAEUS   (Greece)

Author keywords

Detection mechanism; Internal attacker; Intrusion detection; Non cooperative game theory; Quantal response equilibrium; Repeated game

Indexed keywords

DETECTION MECHANISM; INTERNAL ATTACKER; NON-COOPERATIVE GAME THEORY; QUANTAL RESPONSE; REPEATED GAMES;

BEHAVIORAL RESEARCH; COMPUTER CRIME; COMPUTER OPERATING SYSTEMS; GAME THEORY; TELECOMMUNICATION NETWORKS;

INTRUSION DETECTION;

EID: 78449293060     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2010.06.002     Document Type: Article

References (41)

1. A. Agah, and S.K. Das Preventing DoS attacks in wireless sensor networks: a repeated game theory approach International Journal of Network Security 5 2 September 2007 145 153
2. Alpcan T, Baar T. A game theoretic approach to decision and analysis in network intrusion detection. In: Proc. of the 42rd IEEE conference on decision and control (CDC), Maki, HI; December 2003. p. 2595-600.
3. Alpcan T, Baar T. A game theoretic analysis of intrusion detection in access control systems. In; Proc. of the 43rd IEEE conference on decision and control (CDC), Paradise Island, Bahamas; December 2004. p. 1568-73.
4. Alpcan T, Baar T. An intrusion detection game with limited observations, In: Proc. of the 12th international symposium on dynamic games and Applications, Sophia Antipolis, France; July 2006.
5. K. Binmore Playing for real - a text on game theory 2007 Oxford University Press
6. Brackney RC, Anderson RH. Understanding the insider threat. In: Proceedings of a March 2004 workshop: National Security Research Division, RAND.
7. D. Cappelli, A. Moore, R. Trzeciak, and T. Shimeall Common sense guide to prevention and detection of insider threats 3rd ed. January 2009 CERT, Software Engineering Institute, Carnegie Mellon University Version 3.1
8. Cavusoglu H, Raghunathan S. Configuration of intrusion detection systems: a comparison of decision and game theoretic approaches. In: Proc. of the 24th international conference on information systems; December 2003. p. 692-05.
9. R.T. Clemen, and R.L. Winkler Combining probability distributions from experts in risk analysis Risk Analysis 19 2 1999
10. Computing Technology Industry Association (CompTIA) CompTIA survey reveals human error most likely cause of IT security breaches, March 18, 2003 http://findarticles.com/p/articles/mi-m0EIN/is-2003-March-18/ai-98899630 [accessed 02.10]
11. Daskalakis C, Goldberg P, Papadimitriou H. The complexity of computing a Nash equilibrium. In: the 38th annual ACM symposium on theory of computing (STOC); 2006.
12. Daskalakis C. The complexity of Nash equilibria, PhD thesis: University of California. Berkeley; Fall 2008.
13. I. Erev, and E.A. Roth Predicting how people play games: reinforcement learning in experimental games with unique mixed strategy equilibria The American Economic Review 88 4 September 1998 848 881
14. J. Goeree, C. Holt, and T. Palfrey Quantal response equilibrium Steven N. Durlauf, Lawrence E. Blume, The New Palgrave: a dictionary of economics 2nd ed. 2008 Palgrave Macmillan
15. P.A. Haile, A. Hortaccsu, and G. Kosenok On the empirical content of quantal response equilibrium The American Economic Review 98 1 March 2008 180 200
16. Y. Ho, Q. Zhao, and D. Pepyne The no free lunch theorems: complexity and security IEEE Transactions on Automatic Control 48 5 May 2003 783 793
17. I. Kantzavelou, and S. Katsikas A generic intrusion detection game model in IT security Proc. of the 5th international conference on trust, privacy and security in digital business (TrustBus '08) September 2008 Springer-Verlag Turin, Italy 151 162
18. Kantzavelou I, Katsikas S. Playing games with internal attackers repeatedly. In: Proc. of the IEEE 16th international workshop on systems, signals, and image processing (IWSSIP '09), Chalkida, Greece, 2009. p. 1 - 6, doi:10.1109/IWSSIP.2009.5367708 (Invited).
19. Kodialam M, Lakshman T. Detecting network intrusions via sampling: a game theoretic approach. In: Proc. of the IEEE INFOCOM 2003, San Francisco; March 2003.
20. Liu P, Zang W. Incentive-based modeling and inference of attacker intent, objectives, and strategies. In: Proc. of the 10th ACM computer and communications security conference (CCS 2003). Washington, DC, USA; October 2003. p. 179-89.
21. D. Liu, X. Wang, and J. Camp Game-theoretic modeling and analysis of insider threats International Journal of Critical Infrastructure Protection I 1 1 2008 75 80
22. Lye K, Wing J. Game strategies in network security, In: Proceedings of the Foundations of computer security workshop. Copenhagen, Denmark; July 2002.
23. K. Lye, and J. Wing Game strategies in network security International Journal of Information Security, Special Issue 4 February 2005 71 86
24. R. McKelvey, and T. Palfrey Quantal response equilibria for normal form games Games and Economic Behavior 10 1995 6 38
25. R. McKelvey, and T. Palfrey Quantal response equilibria for extensive form games Experimental Economics 1 1998 9 41
26. R.D. McKelvey, A.M. McLennan, and T.L. Turocy Gambit: Software tools for game theory, Version 0.2007.01.30 (accessed 20.01.10) http://gambit.sourceforge. net January 2007
27. N. Nisan, T. Roughgarden, E. Tardos, V. Vazirani, Algorithmic game theory 2007 Cambridge University Press
28. M.J. Osborne, and A. Rubinstein A course in game theory 1994 The MIT Press
29. M.J. Osborne An introduction to game theory 2004 Oxford University Press New York
30. G. Panagiotou Conjoining prescriptive and descriptive approaches: towards an integrative framework of decision making Management Decision 46 4 2008 553 564 Emerald
31. Patcha A, Park J. A game theoretic approach to modeling intrusion detection in mobile ad hoc networks. In: Proc. of the 2004 IEEE Workshop on information assurance and security, United States Military Academy. West Point, NY; 10-11 June 2004.
32. A. Patcha, and J. Park A game theoretic formulation for intrusion detection in mobile ad hoc networks International Journal of Network Security 2 2 March 2006 131 137
33. M.R. Randazzo, M. Keeney, E. Kowalski, D. Cappelli, and A. Moore Insider threat study: illicit cyber activity in the banking sector June 2005 Technical Report, CMU/SEI-2004-TR-021
34. M.B. Salem, S. Hershkop, and S.J. Stolfo A survey of insider attack detection research S.J. Stolfo, S.M. Bellovin, S. Hershkop, A. Keromytis, S. Sinclair, S.W. Smith, Insider attack and cyber security - beyond the hacker 2008 Springer
35. Sallhammar K, Knapskog J, Helvik BE. Using stochastic game theory to compute the expected behavior of attackers. In: Proc. of the 2005 symposium on applications and the Internet workshops (SAINT-W'05). Trento, Italy; 31 Jan-4 Feb 2005. p. 102-5.
36. SANS Institute Top-20 2007 Internet security problems, threats, and risks http://www.sans.org/top20/2007/#h1 (accessed 02.10)
37. R. Selten, and T. Chmura Stationary concepts for experimental 2 × 2-games The American Economic Review 98 3 June 2008 938 966
38. B. Skyrms, and P. Vanderschraaf Game theory D.M. Gabbay, Philippe Smets, Handbook of defeasible reasoning and uncertainty management systems vol. 1 1998 Kluwer Academic Publishers Dordrecht 391 439
39. T. Turocy A dynamic homotopy interpretation of quantal response equilibrium correspondences Games and Economic Behavior 51 2005 243 263
40. E. van Damme Game theory: the next stage A. Kirman, L. Gérard-Varet, Economics beyond the millennium 1999 Oxford University Press
41. R.L. Winkler Combining probability distributions from dependent information sources Management Science 27 4 April 1981 479 488