Skip to main content
Book cover

International Workshop on Security and Trust Management

STM 2015: Security and Trust Management pp 274–282Cite as

A Game Theoretic Framework for Modeling Adversarial Cyber Security Game Among Attackers, Defenders, and Users

Part of the Lecture Notes in Computer Science book series (LNSC,volume 9331)

Abstract

This paper models interactions in the cyber environment as a three-way security game between attacker, defender, and user. The paper focuses on understanding and modeling the roles, motivations and conflicting objectives of the players. Unlike most research in cyber security, this paper studies not only technological but also psychosocial aspects of the interactions. The paper develops recommendations for selecting games that have relevant features for representing cyber security interactions and outlines directions for future research.

Keywords

  • Nash Equilibrium
  • Security Policy
  • Intrusion Detection System
  • Successful Attack
  • Social Reward

These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

This is a preview of subscription content, access via your institution.

Chapter
USD   29.95
Price excludes VAT (USA)
  • DOI: 10.1007/978-3-319-24858-5_18
  • Chapter length: 9 pages
  • Instant PDF download
  • Readable on all devices
  • Own it forever
  • Exclusive offer for individuals only
  • Tax calculation will be finalised during checkout
eBook
USD   44.99
Price excludes VAT (USA)
  • ISBN: 978-3-319-24858-5
  • Instant PDF download
  • Readable on all devices
  • Own it forever
  • Exclusive offer for individuals only
  • Tax calculation will be finalised during checkout
Softcover Book
USD   59.99
Price excludes VAT (USA)
Learn about institutional subscriptions
Fig. 1.
Fig. 2.
Fig. 3.
Fig. 4.

References

  1. Anderson, R., Moore, T.: The economics of information security. Science 314, 610–613 (2006)

    CrossRef  Google Scholar 

  2. Bistarelli, S., Fioravanti, F., Peretti, P.: Defense trees for economic evaluation of security investments, Availability, Reliability and Security, IEEE Computer Society (2006)

    Google Scholar 

  3. Ibidunmoye, E.O., Alese, B.K., Ogundele, O.S.: A Game-theoretic scenario for modelling the attacker-defender interaction. J. Comput. Eng. Inf. Technol. 2(1), 27–32 (2013)

    Google Scholar 

  4. Funderberg, D., Tirole, J.: Game Theory. MIT Press, Cambridge (1992)

    Google Scholar 

  5. Herath, T., Rao, H.: Protection motivation and deterrence: a framework for security policy compliance in organisations. Eur. J. Inf. Syst. 18(2), 106–125 (2010)

    CrossRef  Google Scholar 

  6. Furnell, S., Bryant, P., Phippen, A.: Assessing the Security Perceptions of Personal Internet Users. Comput. Secur. 26(5), 410–417 (2007)

    CrossRef  Google Scholar 

  7. Lye, K., Wing, J.: Game strategies in network security. In: Proceedings of the Foundations of Computer Security (2002)

    Google Scholar 

  8. Manshaei, H., Zhu, Q., Alpcan, T., Basar, T., Hubaux, J.P.: Game theory meets network security and privacy. ACM Trans. Comput. Logic 5 (2011)

    Google Scholar 

  9. Perry, T.S., Wallich, P.: Can computer crime be stopped? IEEE Spectr. 21(5), 34–45 (1984)

    CrossRef  Google Scholar 

  10. Roy, S., Ellis, C., Shiva, S., Dasgupta, D., Shandilya, V., Wu, Q.: A survey of game theory as applied to network security. In: System Sciences (HICSS) (2010)

    Google Scholar 

  11. Shapley, L.S.: Stochastic Games. In: Proceedings of the National Academy of Science USA 39: 1095-1100 (1953)

    Google Scholar 

  12. Verendel, V.: Quantified security is a weak hypothesis: a critical survey of results and assumptions. In: Proceedings of the workshop on new security paradigms workshop. ACM (2009)

    Google Scholar 

Download references

Acknowledgments

The authors would like to thank Richard John and Heather Rosoff for discussions and feedback that helped develop the ideas expressed in this paper. This research was supported by funding the National Science Foundation under award No. 1314644.

Author information

Authors and Affiliations

  1. USC Information Sciences Institute, Marina del Rey, USA

    Tatyana Ryutov, Michael Orosz & James Blythe

  2. USC, Los Angeles, USA

    Detlof von Winterfeldt

Authors
  1. Tatyana Ryutov
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Michael Orosz
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. James Blythe
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Detlof von Winterfeldt
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Tatyana Ryutov .

Editor information

Editors and Affiliations

  1. Dipartimento di Informatica, Università degli Studi di Milano, Crema, Italy

    Sara Foresti

Rights and permissions

Reprints and Permissions

Copyright information

© 2015 Springer International Publishing Switzerland

About this paper

Cite this paper

Ryutov, T., Orosz, M., Blythe, J., von Winterfeldt, D. (2015). A Game Theoretic Framework for Modeling Adversarial Cyber Security Game Among Attackers, Defenders, and Users. In: Foresti, S. (eds) Security and Trust Management. STM 2015. Lecture Notes in Computer Science(), vol 9331. Springer, Cham. https://doi.org/10.1007/978-3-319-24858-5_18

Download citation

  • DOI: https://doi.org/10.1007/978-3-319-24858-5_18

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-319-24857-8

  • Online ISBN: 978-3-319-24858-5

  • eBook Packages: Computer ScienceComputer Science (R0)