A parallel game model‐based intrusion response system for cross‐layer security in industrial internet of things
A parallel game model‐based intrusion response system for cross‐layer security in industrial internet of things
复制标题
DOI：
10.1002/cpe.7826
复制
发表时间：
2023-05
期刊：
影响因子：
--
通讯作者：
Siyang Yu;Fan Wu;Baoding Chen;Ronghui Cao;Zhibang Yang;Keqin Li
中科院分区：
文献类型：
--
作者：
Siyang Yu;Fan Wu;Baoding Chen;Ronghui Cao;Zhibang Yang;Keqin Li
随着工业化的兴起，工业物联网（IIoT）的重要性显著增加，随之而来的是各种安全威胁。因此，这些网络的安全性至关重要。工业响应系统（IRSs）作为最后一道安全防线，在工业物联网安全体系中发挥着重要作用。本文提出了一种新的基于非合作博弈的IRS模型。首先，通过结合部分可观测马尔可夫决策过程（POMDP）模型和基于扩展攻击树的随机博弈模型，我们的模型可以有效地感知每个节点的变化。其次，将入侵检测系统（IDS）的报警信息和工业网络物理系统（ICPS）中传感器的物理量纳入量化体系，使模型能够更准确、全面地对入侵者做出响应。最后，我们开发了基于多处理器的POMDP模型，以加快求解过程，并采用一种近似算法来减少POMDP的迭代次数
With the rise of industrialization, the importance of the industrial Internet of Things (IIoT) has increased significantly, and with it comes a variety of security threats. Therefore, the security of these networks is critical. Industrial Response Systems (IRSs), as the last line of security, plays an important role in the security system of the Industrial Internet of Things. In this paper, a new IRS model based on the non‐cooperative game is proposed. First, by combining the Partially Observable Markov Decision Process (POMDP) model with the stochastic game model based on the expanded attack tree, our model could effectively perceive the changes at each node. Second, our model incorporates the alarms of intrusion detection system (IDS) and the physical quantities of sensors in Industrial Cyber‐Physical System (ICPS) into the quantization system so that the model can respond to intruders more accurately and comprehensively. Finally, we develop this model based on multiprocessors to speed up the solution process, and adopt an approximation algorithm to reduce the number of iterations of the POMDP