Abstract

Network security is a crucial challenge facing Internet-of-Things (IoT) systems worldwide, which leads to serious safety alarms and great economic loss. This paper studies the problem of malicious interdicting network exploitation of IoT systems that are modeled as a bi-layer logical–physical network. In this problem, a virtual attack takes place at the logical layer (the layer of Things), while the physical layer (the layer of Internet) provides concrete support for the attack. In the interdiction problem, the attacker attempts to access a target node on the logical layer with minimal communication cost, but the defender can strategically interdict some key edges on the physical layer given a certain budget of interdiction resources. This setting generalizes the classic single-layer shortest-path network interdiction problem, but brings in nonlinear objective functions, which are notoriously challenging to optimize. We reformulate the model and apply Benders decomposition process to solve this problem. A layer-mapping module is introduced to improve the decomposition algorithm and a random-search process is proposed to accelerate the convergence. Extensive numerical experiments demonstrate the computational efficiency of our methods.

Highlights

  • With the development of information and communication technologies, more and more functional systems have begun to be built based on information networks

  • The separation of these two layers brings about the non-linearity of the objective function

  • This paper focuses on blocking malicious network behaviors in Internet of Things (IoT) systems which can be modeled as logical–physical networks

Read more

Summary

Introduction

With the development of information and communication technologies, more and more functional systems have begun to be built based on information networks. With the physical-layer network alone, it is impossible to judge whether a path meets the functional requirements; with the logical-layer network alone, it is impossible to confirm the specific delay of links in the network and the effect of interdiction. The separation of these two layers brings about the non-linearity of the objective function LPNSPI has a completely different setting on the inter-layer relationships of logical–physical networks, which pays more attention to the relationships between logical functions and physical communication paths.

Shortest Path Interdiction Problem in Logical–Physical Networks
Basic Decomposition Algorithm for LPNSPI
Layer-Mapping Module
A Random-Search Method for Accelerating Convergence
Computational Experiments
Findings
Conclusions
Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call