Proactive and Dynamic Network Defense

270 Pages·2019·6.682 MB·English

by  Cliff Wang, Zhuo Lu

Advances in Information Security 74
Cliff Wang
Zhuo Lu Editors
Proactive
and Dynamic
Network
Defense
Advances in Information Security
Volume 74
Serieseditor
SushilJajodia,GeorgeMasonUniversity,Fairfax,VA,USA
Moreinformationaboutthisseriesathttp://www.springer.com/series/5576
Cliff Wang • Zhuo Lu
Editors
Proactive and Dynamic
Network Defense
123
Editors
CliffWang ZhuoLu
ComputingandInformationScience DepartmentofElectricalEngineering
Division UniversityofSouthFlorida
ArmyResearchOffice Tampa,FL,USA
Durham,NC,USA
ISSN1568-2633
AdvancesinInformationSecurity
ISBN978-3-030-10596-9 ISBN978-3-030-10597-6 (eBook)
https://doi.org/10.1007/978-3-030-10597-6
This is a U.S. government work and not under copyright protection in the U.S.; foreign copyright
protectionmayapply2019
AllrightsarereservedbythePublisher,whetherthewholeorpartofthematerialisconcerned,specif-
icallytherightsoftranslation,reprinting,reuseofillustrations,recitation,broadcasting,reproduction
on microfilms or in any other physical way, and transmission or information storage and retrieval,
electronic adaptation, computer software, or by similar or dissimilar methodology now known or
hereafterdeveloped.
Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication
doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant
protectivelawsandregulationsandthereforefreeforgeneraluse.
Thepublisher,theauthors,andtheeditorsaresafetoassumethattheadviceandinformationinthisbook
arebelievedtobetrueandaccurateatthedateofpublication.Neitherthepublishernortheauthorsor
theeditorsgiveawarranty,expressorimplied,withrespecttothematerialcontainedhereinorforany
errorsoromissionsthatmayhavebeenmade.Thepublisherremainsneutralwithregardtojurisdictional
claimsinpublishedmapsandinstitutionalaffiliations.
ThisSpringerimprintispublishedbytheregisteredcompanySpringerNatureSwitzerlandAG.
Theregisteredcompanyaddressis:Gewerbestrasse11,6330Cham,Switzerland
Preface
This volume partially comes out a special workshop that was dedicated to discuss
the latest research topics in proactive and adaptive network defense held in Fall
2017.Althoughnetworksecurityhasbeenstudiedforthepasttwodecadesresulting
in many different approaches to address various types of attacks and to enhance
networkresiliency,proactiveandadaptivedefenseapproachessuchasmovingtarget
defense and using network deception are still relatively new. There is also a lack
of formal models that can effectively capture the rich dynamics between attackers
and defenders under complex settings such as having multiplayers, with multiple
stages and various levels of engagement, and constrained by partial information
of adversaries or network situation uncertainties. The workshop has identified the
followinginterestingresearchchallengesthatthecommunityispursuing:defining
fundamental models for proactive network defense, game theory-based network
defense frameworks, learning-based attack and defense interactions, and proactive
network defense for emerging applications (e.g., wireless, mobile, and in-vehicle
systemapplications).
This volume is designed for better understanding of proactive and dynamic
network defense that has been proposed as an important alternative cyber defense
mechanismtowardcomprehensivenetworkdefense.Wepresentacollectionofthe
latest fundamental research results toward understanding proactive and dynamic
network defense by top researchers in related areas. This volume includes papers
thatofferformalframeworkstodefineproactiveanddynamicnetworkdefenseand
develop novel models to analyze and evaluate proactive designs and strategies in
computersystems,networksystems,cyber-physicalsystems,andwirelessnetworks.
A wide variety of scientific techniques have been highlighted to study these
problemsinthefundamentaldomain.Wesincerelyhopethatthisvolumecaninspire
researchers to face current research challenges and further explore more solid and
rigorousscientificfoundationsforproactiveanddynamicnetworkdefense.
Durham,NC,USA CliffWang
Tampa,FL,USA ZhuoLu
v
Acknowledgments
We are extremely grateful to the contributors and authors for their great contri-
butions to this book. We also would like to thank Susan Lagerstrom-Fife, senior
publishingeditoratSpringer,forhersupportofthisproject.
vii
Contents
1 Cybersecurity Dynamics: A Foundation for the Science
ofCybersecurity ............................................................ 1
ShouhuaiXu
2 ProactiveNetworkDefensewithGameTheory......................... 33
SinongWangandNessShroff
3 Entropy-BasedProactiveandReactiveCyber-PhysicalSecurity..... 59
ArisKanellopoulosandKyriakosG.Vamvoudakis
4 Security-AwareIncentivesDesignforMobileDevice-to-Device
Offloading ................................................................... 85
JieXuandLixingChen
5 EnhancePhysicalLayerSecurityviaChannelRandomization
withReconfigurableAntennas............................................ 115
Yanjun Pan, Ming Li, Yantian Hou, Ryan M. Gerdes,
andBedriA.Cetiner
6 TowardsHigh-ResolutionMulti-StageSecurityGames................ 139
AronLaszka,XenofonKoutsoukos,andYevgeniyVorobeychik
7 MovingTargetDefenseforAttackMitigationinMulti-Vehicle
Systems ...................................................................... 163
JairoGiraldoandAlvaroA.Cardenas
8 TheRoleofMachineLearningandRadioReconfigurability
intheQuestforWirelessSecurity ........................................ 191
Francesco Restuccia, Salvatore D’Oro, Liyang Zhang,
andTommasoMelodia
ix
x Contents
9 ProactiveUserAuthenticationUsingWiFiSignalsinDynamic
Networks..................................................................... 223
HongboLiu,YanWang,JianLiu,andYingyingChen
10 Multi-Carrier Jamming Mitigation: A Proactive Game
TheoreticApproach ........................................................ 249
KooroshFirouzbakht,GuevaraNoubir,andMasoudSalehi
Contributors
AlvaroA.Cardenas Erik Jonsson School of Engineering, University of Texas at
Dallas,Richardson,TX,USA
Baskin School of Engineering, University of California, Santa Cruz, Santa Cruz,
CA,USA
BedriA.Cetiner UtahStateUniversity,Logan,UT,USA
LixingChen UniversityofMiami,CoralGables,FL,USA
YingyingChen RutgersUniversity,NewBrunswick,NJ,USA
SalvatoreD’Oro Institute for the Wireless Internet of Things, Northeastern
University,Boston,MA,USA
KooroshFirouzbakht NortheasternUniversity,Boston,MA,USA
RyanM.Gerdes VirginiaTech,Arlington,VA,USA
JairoGiraldo ErikJonssonSchoolofEngineering,UniversityofTexasatDallas,
Richardson,TX,USA
YantianHou BoiseStateUniversity,Boise,ID,USA
ArisKanellopoulos TheGuggenheimSchoolofAerospaceEngineering,Georgia
InstituteofTechnology,Atlanta,GA,USA
XenofonKoutsoukos Department of Electrical Engineering and Computer
Science,VanderbiltUniversity,Nashville,TN,USA
AronLaszka DepartmentofComputerScience,UniversityofHouston,Houston,
TX,USA
MingLi TheUniversityofArizona,Tucson,AZ,USA
HongboLiu IndianaUniversityPurdueUniversityIndianapolis,Indianapolis,IN,
USA
xi