A multi-stage game approach applied to network security risk controlling

Abstract

Based on the actual situation of network attack and defense, a multi-stage attack-defense game model is formulated for the multi-stage attack-defense confrontation with the constraint of incomplete information. Considering that the network attack and defense has been developed rapidly and in real-time condition, the way that traditional discrete multi-stage game model has been used to analyze the attack-defense behavior cannot meet the actual demand. Based on the discrete multi-stage attack and defense game model, we make the discretization process continuous while the attack-defense game model under time continuous condition is derived. Then the differential game is introduced to formulate the differential game model of network attack and defense, through which the exploration for network security risk control under time continuous condition is carried out. Finally, a numerical example is given to demonstrate the effectiveness of the proposed model.