Attack-Defense Utility Quantification And Security Risk Assessment

Su Yang, Chensi Wu, Yuqing Zhang, Wenjie Wang, Weiqiang Xie

Abstract: With the developing of the attack and defense technology, the cyber environment has been more and more sophisticated. We failed to give an accurate evaluation of network security situation, as we lack a quantitative assessment of attack-defense behaviors. In response to this situation, we extended the attack-defense stochastic game model (ADSGM) in terms of the utility calculation to evaluate attack-defense behaviors more accurately. Moreover, we analyzed the different defensive capabilities of distinct defense mechanism, putting forward a corresponding utility calculation coping with these capabilities. Through a case study, we showed the impact of defense capabilities as well as the attack time we defined, demonstrating the effectiveness of our methods on attack-defense behavior quantification. This paper filled up the gap in the quantitative assessment of defensive measures, which makes the quantitative evaluation of attack-defense more comprehensive and accurate.