Study Of Game Theory Based Decision Making For Intrusion Response

With the development of network and information, security problems become more serious. As the instruments of attack become more and more complex and automated, the requirements for intrusion response system are also promoted. The traditional static response strategies can't resolve all attacks. Automatic response technique is highlighted in recent research. Although the cost-sensitive model is highlighted in automatic response field, it is a post-analysis technique. It lacks of foresee ability. Furthermore, the action adopted by response system is not only depending on the response system itself, but also depending on the intruder's follow-up actions. Researches have had pointed out that the cost-sensitive model can't evaluating the rationalities on the global. It maybe ends in the system totally inaccessible, consequently.The Game Theory is the very theory that is researching the rationalities under the strategic interdependency situation. And it is also a pre-analysis theory on the global point. Therefore this thesis is proposing a Game Theory Based Decision Making for Intrusion Response(GTDM). The main works and the innovation of the study are as follows.1. A formal model of Game Theory Based Decision Making for Intrusion Response(GTDM) is presented, which evaluated both the undergoing attack and the coming attack to finding the rationally solution. Proving the resolve is existed. The model gives the theoretical and methodological support for intrusion response.2. Proposing an intrusion cost evaluating model. It assesses the damage by the undergoing attack and the coming attack which is service GTDM.3. Building an application based on the above decision making model, and demonstrating the validity of GTDM.