arXiv:2412.01975cs.GTcs.RO2024-12被引 1

用隐藏传感器制造信息差,动态诱骗攻击者暴露弱点。

Reactive Synthesis of Sensor Revealing Strategies in Hypergames on Graphs

  • 构建带不对称信息的图上超博弈模型,模拟攻防双方认知差异。
  • 发现攻击者偏离均衡时存在延迟攻击窗口,可据此设计最优揭密时机。
  • 适合研究网络安全博弈、智能系统防御策略的研究者参考。

在许多网络物理系统(CPS)安全应用中,系统设计者需确保关键任务在传感器和执行器遭受攻击时仍能完成。传统设计常假设攻击者掌握系统全部信息。本文引入一类欺骗技术,研究如何利用欺骗造成的不对称信息增强CPS安全性。考虑一个防御者与攻击者的对抗,攻击者可实施传感器干扰攻击。为应对此类攻击,防御者部署一个‘隐藏传感器’,其存在初始不公开,但可被查询揭示。本文采用图上的超博弈建模此不对称信息博弈。基于超博弈中的主观理性化策略解概念,识别出两个阶段:初始阶段,防御者承诺一种在攻击者感知博弈中被视为理性的策略,直至其偏离均衡;一旦偏离,进入延迟攻击阶段,此时防御者与具有有限延迟的攻击者博弈。基于逆向归纳法,提出算法判断在任一状态是否可通过隐藏传感器并后续揭示获益。若可行,算法输出最优揭示策略。通过两个与CPS安全相关的案例研究验证了该欺骗策略的有效性。

原文摘要 · Abstract (English)

In many security applications of cyber-physical systems, a system designer must guarantee that critical missions are satisfied against attacks in the sensors and actuators of the CPS. Traditional security design of CPSs often assume that attackers have complete knowledge of the system. In this article, we introduce a class of deception techniques and study how to leverage asymmetric information created by deception to strengthen CPS security. Consider an adversarial interaction between a CPS defender and an attacker, who can perform sensor jamming attacks. To mitigate such attacks, the defender introduces asymmetrical information by deploying a "hidden sensor," whose presence is initially undisclosed but can be revealed if queried. We introduce hypergames on graphs to model this game with asymmetric information. Building on the solution concept called subjective rationalizable strategies in hypergames, we identify two stages in the game: An initial game stage where the defender commits to a strategy perceived rationalizable by the attacker until he deviates from the equilibrium in the attacker's perceptual game; Upon the deviation, a delay-attack game stage starts where the defender plays against the attacker, who has a bounded delay in attacking the sensor being revealed. Based on backward induction, we develop an algorithm that determines, for any given state, if the defender can benefit from hiding a sensor and revealing it later. If the answer is affirmative, the algorithm outputs a sensor revealing strategy to determine when to reveal the sensor during dynamic interactions. We demonstrate the effectiveness of our deceptive strategies through two case studies related to CPS security applications.

博弈论安全防御欺骗策略

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。