Modeling and security analysis of enterprise network using attack-defense stochastic game Petri nets

Security and Communication Networks

Volumn 6, Issue 1, 2013, Pages 89-99

  Wang, Yuanzhuo ^a,b   Li, Jingyuan ^a   Meng, Kun ^b   Lin, Chuang ^b   Cheng, Xueqi ^a  

^a INSTITUTE OF COMPUTING TECHNOLOGY   (China)

^b TSINGHUA UNIVERSITY   (China)

Author keywords

Attack defense stochastic game Petri nets; Enterprise network; Security analysis

Indexed keywords

GAME THEORY; PETRI NETS; SECURITY SYSTEMS; STOCHASTIC MODELS; STOCHASTIC SYSTEMS;

ENTERPRISE NETWORKS; MODEL METHOD; SECURITY ANALYSIS; SECURITY BREACHES; SECURITY ISSUES; STOCHASTIC GAME;

NETWORK SECURITY;

EID: 84871690425     PISSN: 19390114     EISSN: 19390122     Source Type: Journal    
DOI: 10.1002/sec.535     Document Type: Article

References (21)

1. Nicol DM, Sanders WH, Trivedi KS. Model-based evaluation: from dependability to security. IEEE Transactions on Dependability and Secure Computing 2004; 1(1):48-65.
2. Sallhammar K, Knapskog SJ, Helvik BE. Using stochastic game theory to compute the expected behavior of attackers. In Proceedings of the 2005 International Symposium on Applications and the Internet (Saint2005) Workshops, 2005.
3. Sallhammar K, Helvik BE, Knapskog SJ. Towards a stochastic model for integrated security and dependability evaluation. In Proceedings of the First International Conference on Availability, Reliability and Security (ARES'06), 2006.
4. Alpcan T, Basar T. A game theoretic approach to decision and analysis in network intrusion detection. In Proceedings of the 42nd IEEE Conference on Decision and Control, 2003.
5. Jiang W, Tian Z-h, Zhang H-l, Song X-f. A stochastic game theoretic approach to attack prediction and optimal active defense strategy decision. 2008 IEEE International Conference on Networking, Sensing and Control, 2008; 648-653.
6. Liu P, Zang W, Yu M. Incentive-based modeling and inference of attacker intent, objectives, and strategies. ACM Transactions on Information and System Security 2005; 8(1): 1-41.
7. Wang X, Reiter M. Defending against denial-of-service attacks with puzzle auctions. In Proceedings of IEEE Security and Privacy, 2003.
8. Xu J, Lee W. Sustaining availability of web services under distributed denial of service attacks. IEEE Transactions on Computers 2003; 52(2): 195-208.
9. Yu M, Wang Y, Liu L, Cheng X. Modeling and analysis of email worm propagation based on stochastic game nets. PDCAT 2011, 2011.8
10. Littlewood B, Brocklehurst S, Fenton N, et al. Towards operational measures of computer security. Journal of Computer Security 1993; 2:211-229.
11. Ortalo R, Deswarte Y. Experimenting with quantitative evaluation tools for monitoring operational security. IEEE Transactions on Software Engineering 1999; 25(5):633-650.
12. Madan BB, Vaidyanathan K, Trivedi KS. Modeling and quantification of security attributes of software systems. In Proceedings of the International Conference on Dependable Systems and Networks (DSN'02), 2002.
13. Sallhammar K, Helvik BE, Knapskog SJ. On stochastic modeling for integrated security and dependability evaluation. The Journal of Networks 2006; 1(5):31-42.
14. Sallhammar K, Knapskog SJ. Using game theory in stochastic models for quantifying security. In Proceedings of the 9th Nordic Workshop on Secure IT-systems. 2004.
15. Wang Y, Yu M, Li J, Meng K, Lin C, Cheng X. Stochastic game net and applications in security analysis for enterprise network. International Journal of Information Security 2011:1-12. doi:10.1007/s10207-011-0148-z.
16. Wang Y, Lin C, Wang Y, Meng K. Security analysis of enterprise network based on stochastic game nets model. ICC'09 Communication and Information Systems Security Symposium 2009.
17. Wang Y, Lin C, Meng K. Security analysis for online banking system using hierarchical stochastic game nets model. IEEE Global Communications Conference 2009.
18. Wang Y, Lin C, Meng K, Lv J. Analysis of attack actions for e-commerce based on stochastic game nets model. Journal of computers 2009; 4(6):461-467.
19. Kats A, Thisse JF. Unilaterally competitive games. International Journal of Game Theory 1992; 21:291-299.
20. Shapley LS. Stochastic games. Proceedings of the National Academy of Science USA, vol. 39, 1953; 1095-1100.
21. Ciaodo G, Muppala J, Trivedi KS. SPNP: Stochastic Petri Net Package. In Proc. Petri Nets and Performance Models, 1989; 142-151.