Dynamical model for individual defence against cyber epidemic attacks

When facing the on-going cyber epidemic threats, individuals usually set up cyber defences to protect their own devices. In general, the individual-level cyber defence is considered to mitigate the cyber threat to some extent. However, few previous studies focus on the interaction between individual-level defence and cyber epidemic attack from the perspective of dynamics. In this study, the authors propose a two-way dynamical framework by coupling the individual defence model with the cyber epidemic model to study the interaction between the network security situation and individual-level defence decision. A new individual-based heterogeneous model for cyber epidemic attacks is established to emphasise the individual heterogeneity in defence strategy. In the meanwhile, a Markov decision process is used to characterise the defence decision in the individual defence decision model. The theoretical and numerical results illustrate that the individual-level defence can dampen the cyber epidemic attack, but the current network security situation, in turn, influences the individual defence decision. Moreover, they obtain a glimpse of the network security situation and the individual defence with respect to different cyber epidemic scenarios.

[1]  George J. Pappas,et al.  Analysis and Control of Epidemics: A Survey of Spreading Processes on Complex Networks , 2015, IEEE Control Systems.

[2]  Christos Faloutsos,et al.  Epidemic thresholds in real networks , 2008, TSEC.

[3]  Joel E. Cohen,et al.  Random evolutions and the spectral radius of a non-negative matrix , 1979, Mathematical Proceedings of the Cambridge Philosophical Society.

[4]  Rong Yang,et al.  Improving resource allocation strategies against human adversaries in security games: An extended study , 2013, Artif. Intell..

[5]  Alessandro Vespignani,et al.  Epidemic spreading in scale-free networks. , 2000, Physical review letters.

[6]  Bing-Hong Wang,et al.  Braess's Paradox in Epidemic Game: Better Condition Results in Less Payoff , 2013, Scientific Reports.

[7]  Hamed Okhravi,et al.  Creating a cyber moving target for critical infrastructure applications using platform diversity , 2012, Int. J. Crit. Infrastructure Prot..

[8]  Daniel I. S. Rosenbloom,et al.  Imitation dynamics of vaccination behaviour on social networks , 2011, Proceedings of the Royal Society B: Biological Sciences.

[9]  Piet Van Mieghem,et al.  Epidemic processes in complex networks , 2014, ArXiv.

[10]  Wei Hu,et al.  Moving target defense: state of the art and characteristics , 2016, Frontiers of Information Technology & Electronic Engineering.

[11]  Lin Wang,et al.  Coupled disease–behavior dynamics on complex networks: A review , 2015, Physics of Life Reviews.

[12]  Michael Franz,et al.  Compiler-Generated Software Diversity , 2011, Moving Target Defense.

[13]  P. Van Mieghem,et al.  Virus Spread in Networks , 2009, IEEE/ACM Transactions on Networking.

[14]  I. Kiss,et al.  The impact of information transmission on epidemic outbreaks. , 2010, Mathematical biosciences.

[15]  William W. Streilein,et al.  Finding Focus in the Blur of Moving-Target Techniques , 2014, IEEE Security & Privacy.