Skip to main content
Article thumbnail
Location of Repository

Incentive-based modeling and inference of attacker intent, objectives, and strategies

By Peng Liu

Abstract

Although the ability to model and infer Attacker Intent, Objectives and Strategies (AIOS) may dramatically advance the literature of risk assessment, harm prediction, and predictive or proactive cyber defense, existing AIOS inference techniques are ad hoc and system or application specific. In this paper, we present a general incentive-based method to model AIOS and a game theoretic approach to infer AIOS. On one hand, we found that the concept of incentives can unify a large variety of attacker intents; the concept of utilities can integrate incentives and costs in such a way that attacker objectives can be practically modeled. On the other hand, we developed a game theoretic AIOS formalization which can capture the inherent inter-dependency between AIOS and defender objectives and strategies in such a way that AIOS can be automatically inferred. Finally, we use a specific case study to show how AIOS can be inferred in real world attack-defense scenarios

Topics: Categories and Subject Descriptors C.2.0 [Computer-Communication Networks, Security and protection General Terms Security, Theory Keywords Attack Prediction, Game Theory, Computer Security
Year: 2003
OAI identifier: oai:CiteSeerX.psu:10.1.1.134.8958
Provided by: CiteSeerX
Download PDF:
Sorry, we are unable to provide the full text but you may find it at the following location(s):
  • http://citeseerx.ist.psu.edu/v... (external link)
  • http://ist.psu.edu/s2/paper/30... (external link)
  • Suggested articles


    To submit an update or takedown request for this paper, please submit an Update/Correction/Removal Request.