title: Defense of Cyber Infrastructures Against Cyber-Physical Attacks Using Game-Theoretic Models.
abstract: The operation of cyber infrastructures relies on both cyber and physical components, which are subject to incidental and intentional degradations of different kinds. Within the context of network and computing infrastructures, we study the strategic interactions between an attacker and a defender using game-theoretic models that take into account both cyber and physical components. The attacker and defender optimize their individual utilities, expressed as sums of cost and system terms. First, we consider a Boolean attack-defense model, wherein the cyber and physical subinfrastructures may be attacked and reinforced as individual units. Second, we consider a component attack-defense model wherein their components may be attacked and defended, and the infrastructure requires minimum numbers of both to function. We show that the Nash equilibrium under uniform costs in both cases is computable in polynomial time, and it provides high-level deterministic conditions for the infrastructure survival. When probabilities of successful attack and defense, and of incidental failures, are incorporated into the models, the results favor the attacker but otherwise remain qualitatively similar. This approach has been motivated and validated by our experiences with UltraScience Net infrastructure, which was built to support high-performance network experiments. The analytical results, however, are more general, and we apply them to simplified models of cloud and high-performance computing infrastructures.
authors.affiliation: Computer Science and Mathematics Division, Oak Ridge National Laboratory, Oak Ridge, TN, USA.
authors.forename: Nageswara S V
authors.initials: NS
authors.lastname: Rao
authors.affiliation: Computer Science and Mathematics Division, Oak Ridge National Laboratory, Oak Ridge, TN, USA.
authors.forename: Stephen W
authors.initials: SW
authors.lastname: Poole
authors.affiliation: Advanced Digital Sciences Center, Singapore.
authors.forename: Chris Y T
authors.initials: CY
authors.lastname: Ma
authors.affiliation: Department of Mechanical and Industrial Engineering, Texas A&M University-Kingsville, Kingsville, TX, USA.
authors.forename: Fei
authors.initials: F
authors.lastname: He
authors.affiliation: Department of Industrial and Systems Engineering, State University of New York, Buffalo, NY, USA.
authors.forename: Jun
authors.initials: J
authors.lastname: Zhuang
authors.affiliation: Department of Computer Science, Singapore University of Technology and Design, Singapore.
authors.forename: David K Y
authors.initials: DK
authors.lastname: Yau
mesh_terms: D000465:Algorithms; D003195:Computer Communication Networks / Q000458:organization & administration*; D016494:Computer Security; D003198:Computer Simulation; D003199:Computer Systems; D005716:Game Theory; D006801:Humans; D007256:Information Systems / Q000458:organization & administration*; D015233:Models, Statistical; D011336:Probability; D015203:Reproducibility of Results; D012984:Software
keywords: Cyber infrastructures; cyber-physical networks; game theory