Decision and Game Theory for Security: 9th International Conference, GameSec 2018, Seattle, WA, USA, October 29–31, 2018, Proceedings

652 Pages·2018·27.053 MB·English

by  Linda Bushnell, Radha Poovendran, Tamer Başar

Linda Bushnell
Radha Poovendran
Tamer Bas¸ar (Eds.)
9
9
1
1 Decision and
1

S
C
Game Theory for Security
N
L
9th International Conference, GameSec 2018
Seattle, WA, USA, October 29–31, 2018
Proceedings
123
Lecture Notes in Computer Science 11199
Commenced Publication in 1973
Founding and Former Series Editors:
Gerhard Goos, Juris Hartmanis, and Jan van Leeuwen
Editorial Board
David Hutchison
Lancaster University, Lancaster, UK
Takeo Kanade
Carnegie Mellon University, Pittsburgh, PA, USA
Josef Kittler
University of Surrey, Guildford, UK
Jon M. Kleinberg
Cornell University, Ithaca, NY, USA
Friedemann Mattern
ETH Zurich, Zurich, Switzerland
John C. Mitchell
Stanford University, Stanford, CA, USA
Moni Naor
Weizmann Institute of Science, Rehovot, Israel
C. Pandu Rangan
Indian Institute of Technology Madras, Chennai, India
Bernhard Steffen
TU Dortmund University, Dortmund, Germany
Demetri Terzopoulos
University of California, Los Angeles, CA, USA
Doug Tygar
University of California, Berkeley, CA, USA
Gerhard Weikum
Max Planck Institute for Informatics, Saarbrücken, Germany
More information about this series at http://www.springer.com/series/7410
Linda Bushnell Radha Poovendran
(cid:129)
ş
Tamer Ba ar (Eds.)
Decision and
Game Theory for Security
9th International Conference, GameSec 2018
–
Seattle, WA, USA, October 29 31, 2018
Proceedings
123
Editors
LindaBushnell Tamer Başar
University of Washington University of Illinois at Urbana–Champaign
Seattle, WA Urbana,IL
USA USA
Radha Poovendran
University of Washington
Seattle, WA
USA
ISSN 0302-9743 ISSN 1611-3349 (electronic)
Lecture Notesin Computer Science
ISBN 978-3-030-01553-4 ISBN978-3-030-01554-1 (eBook)
https://doi.org/10.1007/978-3-030-01554-1
LibraryofCongressControlNumber:2018955975
LNCSSublibrary:SL4–SecurityandCryptology
©SpringerNatureSwitzerlandAG2018
Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpartofthe
material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation,
broadcasting, reproduction on microfilms or in any other physical way, and transmission or information
storageandretrieval,electronicadaptation,computersoftware,orbysimilarordissimilarmethodologynow
knownorhereafterdeveloped.
Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication
doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant
protectivelawsandregulationsandthereforefreeforgeneraluse.
Thepublisher,theauthorsandtheeditorsaresafetoassumethattheadviceandinformationinthisbookare
believedtobetrueandaccurateatthedateofpublication.Neitherthepublishernortheauthorsortheeditors
give a warranty, express or implied, with respect to the material contained herein or for any errors or
omissionsthatmayhavebeenmade.Thepublisherremainsneutralwithregardtojurisdictionalclaimsin
publishedmapsandinstitutionalaffiliations.
ThisSpringerimprintispublishedbytheregisteredcompanySpringerNatureSwitzerlandAG
Theregisteredcompanyaddressis:Gewerbestrasse11,6330Cham,Switzerland
Preface
Recent advances in information and communication technologies, and the incessantly
tighterconnectivitytheseadvanceshaveresultedinamongtheworld’spopulationand
between humans and machines, pose significant security challenges that impact all
aspects of modern society. Concerted efforts are being directed toward alleviating the
underlying vulnerability, protecting heterogeneous, large-scale and dynamic systems,
and managing security risks faced by critical infrastructures, through rigorous and
practically relevant analytical methods. Decision and game theoretic framework is the
centerpiece of these efforts, involving also several neighboring disciplines and tech-
niques, such as distributed optimization, information theory and communication,
statistics,economics,dynamiccontrol,andmechanismdesign,towardanultimategoal
of building resilient, secure, and dependable networked systems, and also securing
existingones.Advancingtheresearchlandscaperequirestheestablishmentofaforum
that brings together security researchers with different backgrounds, but with a com-
mon base of decision and game theory, to share their knowledge and exchange ideas.
Driven by this need and goal, the Conference on Decision and Game Theory for
Security (GameSec) was launched in 2010, to bring together academic, government,
and industrial researchers in an effort to identify and discuss the major technical
challengesandrecentresultsthathighlighttheconnectionsbetweendecisionandgame
theory, information and communication, control, distributed optimization, economic
incentivesandreal-worldsecurity,reputation,trustandprivacyproblems.Ithasgrown
over the years and endured the test of time, with the latest event held in Seattle being
the ninth one in the series.
Consistent with its goal from its inception, GameSec provides an international
forum for researchers from academia, industry, and government to discuss various
decision-theoretic approaches to security using the framework and tools of game
theory.Itfeaturespresentationsonrecentresultsinregularcontributedsessionsaswell
aspostersessions. Ithasspecial sessions focusedonemerging topics ofinteresttothe
security community, as well as panel discussions. It also features plenary talks by
distinguishedresearcherswithoutstandingcontributionstothesecurityfield,whoshare
their perspectives with the participants. As mentioned earlier, this conference series
was inaugurated in 2010, with Berlin (Germany) being the first venue. It quickly
became a well-established and well-recognized annual gathering of security research-
ers, with follow-up conferences held in College Park (Maryland, USA, 2011), Buda-
pest (Hungary, 2012), Fort Worth (Texas, USA, 2013), Los Angeles (USA, 2014),
London(UK,2015),NewYork(USA,2016),andVienna(Austria,2017).Thisyear’s
event was held on the campus of the University of Washington, Seattle (Washington,
USA, 2018) during October 29–31.
As in the previous years, GameSec in Seattle featured high-quality contributions
fromresearchersacrosstheglobe,addressingtheoreticalaswellaspracticalchallenges
faced by the security community, using the framework of game theory. Among the
VI Preface
topicalareascoveredwere:useofgametheory,controltheory,andmechanismdesign
for security and privacy; decision-making for cybersecurity and security requirements
engineering; security and privacy for the Internet of Things, cyber-physical systems,
cloud computing, resilient control systems, and critical infrastructure; pricing, eco-
nomicincentives,securityinvestments,andcyberinsurancefordependableandsecure
systems; risk assessment and security risk management; security and privacy of
wireless and mobile communications, including user location privacy;
socio-technological and behavioral approaches to security; deceptive technologies in
cybersecurity and privacy; empirical and experimental studies with game, control, or
optimization theory-based analysis for security and privacy; and adversarial machine
learning and crowdsourcing, and the role of artificial intelligence in system security.
Theconferenceattracted 44high-quality submissions,fromwhich28fullpapers were
selectedfororalpresentation,andeightshortpapersforposterpresentation,asaresult
ofastringentreviewprocessthatyieldedatleastthreereviewsoneachsubmission.All
acceptedpapersareincludedintheseproceedings.Inaddition,theconferenceprogram
featured a tutorial session on “Game Theory and Deception,” organized by Quanyan
Zhu(NewYorkUniversity,USA);aspecialsessionon“AdversarialAI”followedbya
panel discussion, organized by Eugene Vorobeychik (Vanderbilt University, USA);
andapanelsessionon“Real-WorldUsesofGameTheoryforSecurity,”organizedby
Milind Tambe (University of Southern California, USA). Two plenary talks were
delivered, by John Baras (University of Maryland, USA) and Joao Hespanha
(UniversityofCalifornia,SantaBarbara,USA).Wethankthespecialsessionandpanel
organizersandtheplenaryspeakersfortheiroutstandingcontributionstotheprogram.
We thank also members of the Technical Program Committee and the Organizing
Committee (who are listed in the Proceedings) for their diligence and hard work that
contributed to the success of this year’s GameSec.
Several organizations and government agencies provided support for this year’s
GameSec. We thank the Army Research Office (ARO), the Office of Naval Research
(ONR), the National Research Foundation (NSF), Association for Computing
Machinery (ACM), Springer Lecture Notes in Computer Science (LNCS), and the
MDPIjournalGamesfortheircontinuingsupportoftheconference.ARO,ONR,NSF,
andSpringerLNCSprovidedstudenttravelsupport,andGamessponsoredthetwobest
paper awards at the conference. Local arrangements were handled smoothly and
competently by the University of Washington Electrical and Computer Engineering
Events Team.
We hope that a broad group of constituents involved with and in security, from
theoreticians to practitioners and policy makers, benefited from this record of
state-of-the-art presentations at GameSec 2018.
October 2018 Linda Bushnell
Radha Poovendran
Tamer Başar
Organization
Steering Committee
Tansu Alpcan University of Melbourne, Australia
John S. Baras University of Maryland, USA
Tamer Başar University of Illinois at Urbana–Champaign, USA
Anthony Ephremides University of Maryland, USA
Milind Tambe University of Southern California, USA
Organizers
General Chairs
Tamer Başar University of Illinois at Urbana–Champaign, USA
Radha Poovendran University of Washington, USA
TPC Chair
Linda Bushnell University of Washington, USA
Special Track Chair
Eugene Vorobeychik Vanderbilt University, USA
Tutorial Track Chair
Quanyan Zhu New York University, USA
Local Arrangements Chair
Lillian Ratliff University of Washington, USA
Publicity Chairs
Jun Moon UNIST, South Korea
Dario Bauso University of Sheffield, UK
Miroslav Pajic Duke University, USA
Web Chair
Andrew Clark Worcester Polytechnic Institute, USA
VIII Organization
Program Committee
Habtamu Abie Norsk Regnesentral - Norwegian Computing Center,
Norway
Saurabh Amin Massachusetts Institute of Technology, USA
Bo An Nanyang Technological University, Singapore
Battista Biggio University of Cagliari, Italy
Linda Bushnell (Chair) University of Washington, USA
Alvaro Cardenas UT Dallas, USA
Anil Kumar Chorppath TU Dresden, Germany
Andrew Clark Worcester Polytechnic Institute, USA
Mark Felegyhazi Budapest University of Technology and Economics,
Hungary
Rosario Gennaro City University of New York, USA
Rica Gonen Yahoo!, USA
Jens Grossklags Technical University of Munich, Germany
Noam Hazon Ariel University, Israel
Eduard Jorswieck TU Dresden, Germany
Charles Kamhoua US Army Research Laboratory, USA
Murat Kantarcioglu University of Texas at Dallas, USA
Alex Kantchelian University of California, Berkeley, USA
Christopher Kiekintveld University of Texas at El Paso, USA
Aron Laszka University of Houston, USA
Yee Wei Law University of South Australia, Australia
Chang Liu University of California, Berkeley, USA
Daniel Lowd University of Oregon, USA
Patrick Mcdaniel Pennsylvania State University, USA
Prasant Mohapatra University of California, Davis, USA
Shana Moothedath University of Washington, USA
Mehrdad Nojoumian Florida Atlantic University, USA
Andrew Odlyzko University of Minnesota, USA
Miroslav Pajic Duke University, USA
Manos Panaousis University of Surrey, UK
Nicolas Papernot Pennsylvania State University, USA
David Pym University College London, UK
Bhaskar University of Washington, USA
Ramasubramanian
Stefan Rass Universität Klagenfurt, Germany
Sang Sagong University of Washington, USA
Reza Shokri National University of Singapore, Singapore
Arunesh Sinha University of Michigan, USA
William Streilein Massachusetts Institute of Technology, USA
George Cardiff University, UK
Theodorakopoulos
Long Tran-Thanh University of Southampton, UK
Doug Tygar University of California, Berkeley, USA
Organization IX
Yevgeniy Vorobeychik Vanderbilt University, USA
Neal Wagner Massachusetts Institute of Technology, USA
Haifeng Xu University of Southern California, USA
Tao Zhang New York University, USA
Zizhan Zheng Tulane University, USA
Quanyan Zhu New York University, USA
Jun Zhuang SUNY Buffalo, USA
Additional Reviewers
Barreto, Carlos Giraldo, Jairo Shan, Xiaojun
Basak, Anjon Gu, Tianbo Song, Cen
Boudko, Svetlana Gutierrez, Marcus Spring, Jonathan M.
Caulfield, Tristan Huang, Yunhan Uttecht, Karen
Celik, Berkay Matterer, Jason Veliz, Oscar
Demontis, Ambra Padilla, Edgar Wachter, Jasmin
Elfar, Mahmoud Peng, Guanze Xu, Hong
Farhang, Sadegh Qian, Yundi Zeng, Yunze
Feng, Xiaotao Roy, Abhishek