A Novel Differential Game Model-Based Intrusion Response Strategy in Fog Computing

Xingshuo An,Fuhong Lin,Chao Gong,Li Miao,Shenggang Xu

doi:10.1155/2018/1821804

Xingshuo An, Fuhong Lin + Show 3 more

Open Access

https://doi.org/10.1155/2018/1821804

Copy DOI

Abstract

Fog computing is an emerging network paradigm. Due to its characteristics (e.g., geo-location and constrained resource), fog computing is subject to a broad range of security threats. Intrusion detection system (IDS) is an essential security technology to deal with the security threats in fog computing. We have introduced a fog computing IDS (FC-IDS) framework in our previous work. In this paper, we study the optimal intrusion response strategy in fog computing based on the FC-IDS scheme proposed in our previous work. We postulate the intrusion process in fog computing and describe it with a mathematical model based on differential game theory. According to this model, the optimal response strategy is obtained corresponding to the optimal intrusion strategy. Theoretical analysis and simulation results demonstrate that our security model can effectively stabilize the intrusion frequency of the invaders in fog computing.

Highlights

Fog computing is an emerging network model [1]
Fog nodes are located at the edge of the network, which is closer to users
The process of game is dynamic and continuous. Both the invasion against fog nodes started by invaders and the corresponding strategy executed by the system have a direct impact on memory occupancy

Summary

Introduction

Fog computing is an emerging network model [1]. As shown in Figure 1, fog computing is a three-layer architecture: user device layer, fog node layer, and cloud computing layer. Using the modeled stochastic game, the authors in [15] proposed a decision working framework to take optimal actions in case of network intrusion. The main work of this paper is to analyze the characteristics of intrusion in the environment of fog network, apply differential game to model the invaders and system, respectively, and emphasize the theoretical analysis of defense model of the system. The cloud server can take the best security strategy to filter the access requests of the illegal users based on the attack of invaders. To our knowledge, this is the first differential game theory approach to model the interactions between the intruder and the system in fog computing.

Intrusion in Fog Network

Differential Game Models

Solution of Optimal Strategy

Numerical Simulation

Conclusions