Strategic defense and attack in deception based network security

Abstract

Prodigious increases in interconnectivity, highly professionalized electronic crime and espionage syndicates expose today's networks and applications to an extensive threat level. Established defense mechanisms hardly cope with this emerging threat landscape. Adversaries implemented counter measures for most defense mechanisms such as polymorphism to circumvent antivirus software, encryption against deep packet inspection and reverse connections to avoid ingress filtering or poorly configured firewalls. Deception based information security is a promising solution to enhance those established mechanisms. This research paper transfers strategic security and defense concepts from operations research, reliability engineering and game theory to deception based information security mechanisms. Feature and parameter sets for the proposed model are analyzed and discussed. Based on our developed model, network security implications are analyzed in defender and attacker perspectives.