arrow
Return

Optimization-Time Analysis for Cybersecurity

delete2022-07-01
delete7
PRE
AI
Y
Yunxiao Zhang *
P
Pasquale Malacaria
DOI:10.1109/TDSC.2021.3055981delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
A mathematical framework to reason about time resilience in cybersecurity is here introduced. We first consider an attacker who is able to mount several multi-stage attacks on the organization: the defender's objective is to select an optimal portfolio of security controls, within a given budget, to withstand the highest number of attacks. The mathematical model is a Markov chain with an initial state called the safe state, intermediate states for all possible attacks (each attack state denoting a probabilistic attack graph), and a sink state denoting a successful attack. The overall defence problem is formulated as a bi-level multi-objective optimization, i.e., the defender selects an optimal portfolio of security controls to mitigate an optimal attacker. In order to determine the probability of success of an attack two cases will be considered: (a) the expected probability of success and (b) the highest probability of success. We refer to these two cases as expected-time analysis and worst-case time analysis, respectively. To solve precisely these bi-level optimizations strong duality and Mixed Integer Linear Programming are used. We then extend the framework to investigate resilience in terms of the total duration of the attacks; variations of the previous optimizations are presented to this purpose. Finally numerical evaluations are provided to compare the results obtained from the expected-time analysis and the worst-case time analysis.
Keywords:
Security
Resilience
Organizations
Optimization
Markov processes
Analytical models
Mathematical model
Optimization
security
Markov processes
cyber-security
mixed integer linear programming
time resilience
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

IEEE Transactions on Dependable and Secure Computing cover
IEEE Transactions on Dependable and Secure Computing
IF:
7.5
Papers:
2.5K
Citations:
9.6K

Organization

U
university of london
Scholars:
21.5W
Papers: 19.7W
Citations: 305
Cited Papers

Cited Papers

Preterm health: time to bridge the evidence gap
err2020-09-01
err0
PREAI
errRebeccah Slater; Fiona Moultrie; Ralph Bax; John van den Anker; Aomesh Bhatt
errShare
errSave
errShare
errSave
Cryptosporidium sp. in cultivated oysters and the natural oyster stock of the state of Maranhão, Brazil
err2023-01-01
err0
errOAAI
errCamila Moraes Silva; Anna Letícia Pinto Silva; Karinne Francisca Cardoso Watanabe; Raimunda Deusilene Barreira Porto; Danilo Cutrim Bezerra; Larissa Sarmento dos Santos Ribeiro; Viviane Correa Silva Coimbra; Hamilton Pereira Santos; Nancyleni Pinto Chaves Bezerra
errShare
errSave
Infrastructure security games
err2014-12-01
err48
PREAI
errBaykal-Guersoy, Melike; Duan, Zhe; Poor, H. Vincent; Garnaev, Andrey
errShare
errSave
Dynamics and phase transitions in biased ladder systems with magnetic flux
err2019-09-01
err0
PREAI
errXin Qiao; Xiao-Bo Zhang; Ai-Xia Zhang; Zi-Fa Yu; Ju-Kui Xue
errShare
errSave
Decision support approaches for cyber security investment
err2016-06-01
err189
errOAAI
errFielder, Andrew; Panaousis, Emmanouil; Malacaria, Pasquale; Hankin, Chris; Smeraldi, Fabrizio
errShare
errSave
The Donor‐Stabilized Silylene Bis[N,N′‐diisopropylbenzamidinato(−)]silicon(II): Synthesis, Electronic Structure, and Reactivity
err2014-06-05
err0
PREAI
errKonstantin Junold; Marco Nutz; Johannes A. Baus; Christian Burschka; Célia Fonseca Guerra; F. Matthias Bickelhaupt; Reinhold Tacke
errShare
errSave
researcher View more