A Markov game theoretic data fusion approach for cyber situational awareness

Dan Shen; Genshe Chen; Jose B. Cruz Jr.; Leonard Haynes; Martin Kruger; Erik Blasch

doi:10.1117/12.720090

9 April 2007 A Markov game theoretic data fusion approach for cyber situational awareness

Dan Shen, Genshe Chen, Jose B. Cruz Jr., Leonard Haynes, Martin Kruger, Erik Blasch

Proceedings Volume 6571, Multisensor, Multisource Information Fusion: Architectures, Algorithms, and Applications 2007; 65710F (2007) https://doi.org/10.1117/12.720090
Event: Defense and Security Symposium, 2007, Orlando, Florida, United States

Abstract

This paper proposes an innovative data-fusion/ data-mining game theoretic situation awareness and impact assessment approach for cyber network defense. Alerts generated by Intrusion Detection Sensors (IDSs) or Intrusion Prevention Sensors (IPSs) are fed into the data refinement (Level 0) and object assessment (L1) data fusion components. High-level situation/threat assessment (L2/L3) data fusion based on Markov game model and Hierarchical Entity Aggregation (HEA) are proposed to refine the primitive prediction generated by adaptive feature/pattern recognition and capture new unknown features. A Markov (Stochastic) game method is used to estimate the belief of each possible cyber attack pattern. Game theory captures the nature of cyber conflicts: determination of the attacking-force strategies is tightly coupled to determination of the defense-force strategies and vice versa. Also, Markov game theory deals with uncertainty and incompleteness of available information. A software tool is developed to demonstrate the performance of the high level information fusion for cyber network defense situation and a simulation example shows the enhanced understating of cyber-network defense.

Citation Download Citation

Dan Shen, Genshe Chen, Jose B. Cruz Jr., Leonard Haynes, Martin Kruger, and Erik Blasch "A Markov game theoretic data fusion approach for cyber situational awareness", Proc. SPIE 6571, Multisensor, Multisource Information Fusion: Architectures, Algorithms, and Applications 2007, 65710F (9 April 2007); https://doi.org/10.1117/12.720090

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available