Optimizing Active Cyber Defense
This work addresses cybersecurity challenges for network defenders by providing incremental theoretical analysis of optimal defense strategies.
The paper tackles the problem of optimizing active cyber defense by analyzing optimal control strategies for strategic defenders against non-strategic attackers and Nash equilibria for strategic interactions, resulting in theoretical insights into cybersecurity implications.
Active cyber defense is one important defensive method for combating cyber attacks. Unlike traditional defensive methods such as firewall-based filtering and anti-malware tools, active cyber defense is based on spreading "white" or "benign" worms to combat against the attackers' malwares (i.e., malicious worms) that also spread over the network. In this paper, we initiate the study of {\em optimal} active cyber defense in the setting of strategic attackers and/or strategic defenders. Specifically, we investigate infinite-time horizon optimal control and fast optimal control for strategic defenders (who want to minimize their cost) against non-strategic attackers (who do not consider the issue of cost). We also investigate the Nash equilibria for strategic defenders and attackers. We discuss the cyber security meanings/implications of the theoretic results. Our study brings interesting open problems for future research.