Automated Adversary-in-the-Loop Cyber-Physical Defense Planning
نویسندگان
چکیده
Security of cyber-physical systems (CPS) continues to pose new challenges due the tight integration and operational complexity cyber physical components. To address these challenges, this article presents a domain-aware, optimization-based approach determine an effective defense strategy for CPS in automated fashion—by emulating strategic adversary loop that exploits system vulnerabilities, interconnection CPS, dynamics Our builds on adversarial decision-making model based Markov Decision Process (MDP) determines optimal (discrete) (continuous) attack actions over graph. The planning problem is modeled as non-zero-sum game between defender. We use model-free reinforcement learning method solve adversary’s function strategy. then employ Bayesian optimization (BO) find approximate best-response defender harden network against resulting policy. This process iterated multiple times improve both players. demonstrate effectiveness our ransomware-inspired graph with smart building process. Numerical studies show converges Nash equilibrium various defender-specific costs hardening.
منابع مشابه
Cyber Physical System Challenges for Human-in-the-Loop Control
This paper articulates three main challenges for employing feedback control with humans in the loop. They are: (i) the need for a comprehensive understanding of the complete spectrum of the types of human-in-the-loop controls, (ii) the need for extensions to system identification or other techniques to derive models of human behaviors, and (iii) most importantly, determining how to incorporate ...
متن کاملAdversary Modeling and Simulation in Cyber Warfare
Modeling and simulation provide many excellent benefits in preparation for successful cyber operations. Whether used for creating realistic training environments, testing new cyber warfare techniques, or predicting possible adversary actions, it is critical for such simulations to take into account the possibility of an active cyber adversary, able to adapt its plans to network conditions. With...
متن کاملCyber Security of Cyber Physical Systems: Cyber Threats and Defense of Critical Infrastructures
Most critical infrastructures such as the power grid, railway or air traffic control, industrial automation in manufacturing, water/sewage infrastructure, banking system, etc., are cyber physical systems (CPS). Since continued availability of the major functions of these are extremely important for economic and normal lives of people, there is a wide spread concern that these might come under i...
متن کاملFormalizing Agents' Beliefs for Cyber-Security Defense Strategy Planning
Abstract. Critical information infrastructures have been exposed to an increasing number of cyber attacks in recent years. Current protection approaches consider the reaction to a threat from an operational perspective, but leave out human aspects of an attacker. The problem is, no matter how good a defense planning from an operational perspective is, it must be considered that any action taken...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
ژورنال
عنوان ژورنال: ACM Transactions on Cyber-Physical Systems
سال: 2023
ISSN: ['2378-962X', '2378-9638']
DOI: https://doi.org/10.1145/3596222