Tactics involving deception are important in military strategies. We have been exploring deliberate deception in defensive tactics by information systems under cyber-attack as during information warfare. We have developed a tool to systematically "counterplan" or find ways to foil a particular attack plan. Our approach is to first find all possible atomic "ploys" that can interfere with the plan. Ploys are simple deceits the operating system can do such as lying about the status of a file. We analyze ploys as to the degree of difficulty they cause to the plan wherever they can be applied. We then formulate a "counterplan" by selecting the most cost-effective set of ploys and assign appropriate presentation methods for them, taking into account the likelihood that, if we are not careful, the attacker will realize they are being deceived and terminate our game with them. The counterplan can be effected by a modified operating system. We have implemented our counterplanner in a tool MECOUNTER that uses multiagent planning coupled with some novel inference methods to efficiently find a best counterplan. We apply the tool to an example of a rootkit-installation plan and discuss the results.


    Access

    Access via TIB

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Counterplanning deceptions to foil cyber-attack plans


    Contributors:
    Rowe, N.C. (author)


    Publication date :

    2003


    Size :

    8 Seiten, 17 Quellen




    Type of media :

    Conference paper


    Type of material :

    Print


    Language :

    English






    CYBER-ATTACK NOTIFICATION DEVICE AND NOTIFICATION METHOD

    YAMAMOTO TAISEI / HIROBE NAOKI / WATANABE YASUHISA | European Patent Office | 2019

    Free access


    A Hosted Payload Cyber Attack Against Satellites

    Calabrese, Matteo / Kavallieratos, Georgios / Falco, Gregory | AIAA | 2024