Using Event-Based Method to Estimate Cybersecurity Equilibrium

doi:10.1109/JAS.2020.1003527

CORC > 自动化研究所 > 中国科学院自动化研究所 > 学术期刊 > IEEE/CAA Journal of Automatica Sinica

	Using Event-Based Method to Estimate Cybersecurity Equilibrium
	Zhaofeng Liu; Ren Zheng; Wenlian Lu; Shouhuai Xu
刊名	IEEE/CAA Journal of Automatica Sinica
	2021
卷号	8 期号:2 页码:455-467
关键词	Cybersecurity dynamics cybersecurity equilibrium event-based method global state estimation preventive and reactive cyber defense dynamics
ISSN号	2329-9266
DOI	10.1109/JAS.2020.1003527
英文摘要	Estimating the global state of a networked system is an important problem in many application domains. The classical approach to tackling this problem is the periodic (observation) method, which is inefficient because it often observes states at a very high frequency. This inefficiency has motivated the idea of event-based method, which leverages the evolution dynamics in question and makes observations only when some rules are triggered (i.e., only when certain conditions hold). This paper initiates the investigation of using the event-based method to estimate the equilibrium in the new application domain of cybersecurity, where equilibrium is an important metric that has no closed-form solutions. More specifically, the paper presents an event-based method for estimating cybersecurity equilibrium in the preventive and reactive cyber defense dynamics, which has been proven globally convergent. The presented study proves that the estimated equilibrium from our trigger rule i) indeed converges to the equilibrium of the dynamics and ii) is Zeno-free, which assures the usefulness of the event-based method. Numerical examples show that the event-based method can reduce 98% of the observation cost incurred by the periodic method. In order to use the event-based method in practice, this paper investigates how to bridge the gap between i) the continuous state in the dynamics model, which is dubbed probability-state because it measures the probability that a node is in the secure or compromised state, and ii) the discrete state that is often encountered in practice, dubbed sample-state because it is sampled from some nodes. This bridge may be of independent value because probability-state models have been widely used to approximate exponentially-many discrete state systems.
内容类型	期刊论文
源URL	[http://ir.ia.ac.cn/handle/173211/43924]
专题	自动化研究所_学术期刊_IEEE/CAA Journal of Automatica Sinica
推荐引用方式 GB/T 7714	Zhaofeng Liu,Ren Zheng,Wenlian Lu,et al. Using Event-Based Method to Estimate Cybersecurity Equilibrium[J]. IEEE/CAA Journal of Automatica Sinica,2021,8(2):455-467.
APA	Zhaofeng Liu,Ren Zheng,Wenlian Lu,&Shouhuai Xu.(2021).Using Event-Based Method to Estimate Cybersecurity Equilibrium.IEEE/CAA Journal of Automatica Sinica,8(2),455-467.
MLA	Zhaofeng Liu,et al."Using Event-Based Method to Estimate Cybersecurity Equilibrium".IEEE/CAA Journal of Automatica Sinica 8.2(2021):455-467.