Title
Game theoretical adaptation model for intrusion detection system
Abstract
We present a self-adaptation mechanism for Network Intrusion Detection System which uses a game-theoretical mechanism to increase system robustness against targeted attacks on IDS adaptation. We model the adaptation process as a strategy selection in sequence of single stage, two player games. The key innovation of our approach is a secure runtime game definition and numerical solution and real-time use of game solutions for dynamic system reconfiguration. Our approach is suited for realistic environments where we typically lack any ground truth information regarding traffic legitimacy/maliciousness and where the significant portion of system inputs may be shaped by the attacker in order to render the system ineffective. Therefore, we rely on the concept of challenge insertion: we inject a small sample of simulated attacks into the unknown traffic and use the system response to these attacks to define the game structure and utility functions. This approach is also advantageous from the security perspective, as the manipulation of the adaptive process by the attacker is far more difficult. Our experimental results suggest that the use of game-theoretical mechanism comes with little or no penalty when compared to traditional self-adaptation methods.
Year
DOI
Venue
2011
10.1007/978-3-642-28786-2_22
AAMAS
Keywords
Field
DocType
game theoretical adaptation model,system response,secure runtime game definition,game structure,dynamic system reconfiguration,player game,game-theoretical mechanism,real-time use,game solution,system robustness,system input,intrusion detection system,intrusion detection,game theory,security,adaptation
Network intrusion detection,Computer security,Computer science,Robustness (computer science),Ground truth,Game theory,Solution concept,Intrusion detection system,System reconfiguration,Distributed computing
Conference
ISBN
Citations 
PageRank 
0-9826571-7-X
3
0.43
References 
Authors
8
5
Name
Order
Citations
PageRank
Martin Rehak125128.57
Michal Pěchouček21134133.88
Martin Grill310110.79
Jan Stiborek41148.57
Karel Bartos511012.60