Modeling and security analysis of enterprise network using attack–defense stochastic game Petri nets

  • Authors:
  • Yuanzhuo Wang;Jingyuan Li;Kun Meng;Chuang Lin;Xueqi Cheng

  • Affiliations:
  • Institute of Computing Technology, Chinese Academy of Sciences, Beijing, 100190, China and Department of Computer Science and Technology, Tsinghua University, Beijing, 100084, China;Institute of Computing Technology, Chinese Academy of Sciences, Beijing, 100190, China;Department of Computer Science and Technology, Tsinghua University, Beijing, 100084, China;Department of Computer Science and Technology, Tsinghua University, Beijing, 100084, China;Institute of Computing Technology, Chinese Academy of Sciences, Beijing, 100190, China

  • Venue:
  • Security and Communication Networks
  • Year:
  • 2013

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this paper, we propose a novel modeling method attack–defense stochastic game Petri nets (or ADSGN) to model and analyze the security issues in enterprise network. We firstly give the definition and modeling method algorithm of ADSGN and then propose the algorithm of the strategy. The proposed ADSGN method is successfully applied to describe the attack and defense courses in the enterprise network. Finally, we analyze the mean time to first security breach and the mean time to security breach in the enterprise network quantifiably, and proved that our method can also be applied to other areas with respect to game issues. Copyright © 2012 John Wiley & Sons, Ltd. (According to the characteristics of the network attack and defense actions, we extend the previous work by proposing attack-defense stochastic game Petri nets (or ADSGNs), which can be used to model and analyze the competitive game issues by using classical methods from stochastic Petri nets. ADSGN are suitable to investigate the complex and dynamic game-related issues in network attack. In this paper, we use ADSGN to model and analyze the enterprise network attacks, compute the Nash equilibrium to deduce the best-response strategies to defend the attacks. We believe that ADSGN can open a new avenue to handle the game-related issues in network security.)