Research on MTD cybersecurity evaluation technology for information system's attack surface model
Dongmei Bin, Fuchuan Tang, Chunyan Yang, Ying Ling, Xin Li · 2024
Based on the analysis of the MTD security model, this paper proposes an asymmetric cognition modeling method, which models MTD as a multi-stage interactive dynamic game oriented to asymmetric cognition and introduces asymmetric cognition in MTD scenarios into the attack and defense game derivation process through the differentiated projection of the knowledge surfaces of the attackers and defenders in the attack and defense. Make the two sides engage in gambling activities under two completely different frameworks. Due to its cognitive disadvantage, the attacker may not necessarily have a set of effective strategies, and the gambling benefits may not necessarily meet expectations. Therefore, the proposed MTD dynamic gambling can effectively model the asymmetric cognitive relation between the attacker and defender in MTD scenarios, and then simulate and deduce the influences of asymmetric cognition on attack and defense decisions.