.png){kind=icon}
返回
CyGym: A Simulation-Based Game-Theoretic Analysis Framework for Cybersecurity
.png){kind=icon}
PRE
AI
DOI：10.1007/978-3-032-08064-6_8.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
We introduce a novel cybersecurity encounter simulator between a network defender and an attacker designed to facilitate game-theoretic modeling and analysis while maintaining many significant features of real cyber defense. Our simulator, built within the OpenAI Gym framework, incorporates realistic network topologies, vulnerabilities, exploits (including-zero-days), and defensive mechanisms. Additionally, we provide a formal simulation-based game-theoretic model of cyberdefense using this simulator, which features a novel approach to modeling zero-days exploits, and a PSRO-style approach for approximately computing equilibria in this game. We use our simulator and associated game-theoretic framework to analyze the Volt Typhoon advanced persistent threat (APT). Volt Typhoon represents a sophisticated cyber attack strategy employed by state-sponsored actors, characterized by stealthy, prolonged infiltration and exploitation of network vulnerabilities. Our experimental results demonstrate the efficacy of game-theoretic strategies in understanding network resilience against APTs and zero-days, such as Volt Typhoon, providing valuable insight into optimal defensive posture and proactive threat mitigation.
期刊
G
IF:
0
论文数:
16
被引数:
0
机构
引用论文
.png){kind=icon}
分享收藏
Finding Needles in a Moving Haystack: Prioritizing Alerts with Adversarial Reinforcement Learning
OAAI
OAAI分享收藏
查看更多内容