Optimal and Near-Optimal Resource Allocation for Information Security and Critical Infrastructure Protection

这笔赠款提供资金，用于研究防御智能和适应性强的对手的关键基础设施的最佳和接近最佳的战略。博弈论优化模型将考虑到要防御的系统的结构(例如，串联和/或并联子系统)，以及对防御者和对手的目标、知识和约束的不同假设。如果系统过于复杂，无法产生封闭形式的最优结果，则将使用启发式攻击策略进行分析，该策略在广泛的情况下显然是接近最优的，作为开发针对这些攻击策略的最优或接近最优防御的基础。如果成功，这项研究的结果将改进对关键基础设施保护的资源分配的指导。这项工作的主要目标是确定防御性投资策略，这些策略经过优化，可以防御具有不同假设目标、知识和约束的攻击者。例如，攻击者的目标可能包括最大化攻击成功的概率，如果攻击成功则最大化攻击造成的损害，或最大化攻击造成的损害的期望值。同样，攻击者可能对系统的防御性投资有不同程度的了解，也有不同的约束(例如，在检测到攻击者并将其禁用之前，对攻击失败次数的限制)。确定最优或接近最优的策略来防御具有不同特征的攻击者，将有助于提高我们关键基础设施的安全性，并降低关键基础设施保护的成本。这项工作还将有助于为复杂系统中的资源分配问题提供可用的计算工具和方法。

This grant provides funding for the investigation of optimal and near-optimal strategies for defense of critical infrastructure from an intelligent and adaptable adversary. Game-theoretic optimization models will be developed taking into account the structure of the system to be defended (e.g., series and/or parallel subsystems), and also varying assumptions about the goals, knowledge, and constraints of both the defender and the adversary. Systems that are too complex to yield closed-form optimal results will be analyzing using a heuristic attack strategy that is demonstrably near-optimal for a wide range of cases, as a basis for developing optimal or near-optimal defenses against those attack strategies.If successful, the results of this research will lead to improved guidance for allocation of resources to critical infrastructure protection. The primary goal of this work is to identify defensive investment strategies that are optimized to defend against attackers with varying assumed goals, knowledge, and constraints. For example, attacker goals may include maximizing the probability that an attack succeeds, maximizing the damage caused by an attack if successful, or maximizing the expected value of the damage caused by an attack. Similarly, attackers may have differing levels of knowledge about the system's defensive investments, and differing constraints (e.g., limits on the number of failed attacks before the attacker is detected and disabled. Determining optimal or near-optimal strategies to defend against attackers with varying characteristics will help both to improve the security of our critical infrastructure, and also to reduce the cost of critical infrastructure protection. This work will also contribute to the computational tools and methodologies available for resource allocation problems in complex systems.