Evolving Risk Management Against Advanced Persistent Threats in Fog Computing

Shaohan Feng, Zehui Xiong, Dusit Niyato, Ping Wang, Amir Leshem

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

7 Scopus citations

Abstract

With the capability of support mobile computing demand with small delay, fog computing has gained tremendous popularity. Nevertheless, its highly virtualized environment is vulnerable to cyber attacks such as emerging Advanced Persistent Threats attack. In this paper, we propose a novel approach of cyber risk management for the fog computing platform. Particularly, we adopt the cyber-insurance as a tool for neutralizing cyber risks from fog computing platform. We consider a fog computing platform containing a group of fog nodes. The platform is composed of three main entities, i.e., the fog computing provider, attacker, and cyber-insurer. The fog computing provider dynamically optimizes the allocation of its defense computing resources to improve the security of the fog computing platform. Meanwhile, the attacker dynamically adjusts the allocation of its attack resources to improve the probability of successful attack. Additionally, to prevent from the potential loss due to attacks, the provider also makes a dynamic decision on the purchases ratio of cyber-insurance from the cyber-insurer for each fog node. Thereafter, the cyber-insurer accordingly determines the premium of cyber-insurance for each fog node. In our formulated dynamic Stackelberg game, the attacker and provider act as the followers, and the cyber-insurer acts as the leader. In the lower level, we formulate an evolutionary subgame to analyze the provider's defense and cyber-insurance subscription strategies as well as the attacker's attack strategy. In the upper level, the cyber-insurer optimizes its premium determination strategy, taking into account the evolutionary equilibrium at the lower-level evolutionary subgame. We analytically prove that the evolutionary equilibrium is unique and stable. Moreover, we provide a series of insightful analytical and numerical results on the equilibrium of the dynamic Stackelberg game.

Original languageAmerican English
Title of host publicationProceedings of the 2018 IEEE 7th International Conference on Cloud Networking, CloudNet 2018
PublisherInstitute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)9781538668313
DOIs
StatePublished - 27 Nov 2018
Externally publishedYes
Event7th IEEE International Conference on Cloud Networking, CloudNet 2018 - Tokyo, Japan
Duration: 22 Oct 201824 Oct 2018

Publication series

NameProceedings of the 2018 IEEE 7th International Conference on Cloud Networking, CloudNet 2018

Conference

Conference7th IEEE International Conference on Cloud Networking, CloudNet 2018
Country/TerritoryJapan
CityTokyo
Period22/10/1824/10/18

Bibliographical note

Publisher Copyright:
© 2018 IEEE.

Keywords

  • Advanced Persistent Threats attacks
  • Risk management
  • cyber-insurace
  • fog computing
  • game theory

Fingerprint

Dive into the research topics of 'Evolving Risk Management Against Advanced Persistent Threats in Fog Computing'. Together they form a unique fingerprint.

Cite this