skip to main content


Title: Defense of Cyber Infrastructures Against Cyber-Physical Attacks Using Game-Theoretic Models

The operation of cyber infrastructures relies on both cyber and physical components, which are subject to incidental and intentional degradations of different kinds. Within the context of network and computing infrastructures, we study the strategic interactions between an attacker and a defender using game-theoretic models that take into account both cyber and physical components. The attacker and defender optimize their individual utilities expressed as sums of cost and system terms. First, we consider a Boolean attack-defense model, wherein the cyber and physical sub-infrastructures may be attacked and reinforced as individual units. Second, we consider a component attack-defense model wherein their components may be attacked and defended, and the infrastructure requires minimum numbers of both to function. We show that the Nash equilibrium under uniform costs in both cases is computable in polynomial time, and it provides high-level deterministic conditions for the infrastructure survival. When probabilities of successful attack and defense, and of incidental failures are incorporated into the models, the results favor the attacker but otherwise remain qualitatively similar. This approach has been motivated and validated by our experiences with UltraScience Net infrastructure, which was built to support high-performance network experiments. In conclusion, the analytical results, however, are more general,more » and we apply them to simplified models of cloud and high-performance computing infrastructures.« less
 [1] ;  [1] ;  [2] ;  [3] ;  [4] ;  [5]
  1. Oak Ridge National Lab. (ORNL), Oak Ridge, TN (United States). Computer Science and Mathematics Division
  2. Advanced Digital Sciences Center (ADSC), Fusionopolis (Singapore)
  3. Texas A&M Univ.-Kingsville, Kingsville TX (United States). Dept. of Mechanical and Industrial Engineering
  4. State University of New York, Buffalo, NY (United States). Dept. of Industrial and Systems Engineering
  5. Singapore University of Technology and Design (Singapore). Dept. of Computer Science
Publication Date:
Grant/Contract Number:
Accepted Manuscript
Journal Name:
Risk Analysis
Additional Journal Information:
Journal Volume: 36; Journal Issue: 4; Journal ID: ISSN 0272-4332
Research Org:
Oak Ridge National Lab. (ORNL), Oak Ridge, TN (United States)
Sponsoring Org:
Work for Others (WFO); USDOE Office of Science (SC); USDOD
Country of Publication:
United States
97 MATHEMATICS AND COMPUTING; cyber-physical systems; game theory; infrastructure resilience
OSTI Identifier:
Alternate Identifier(s):
OSTI ID: 1401132