Understanding Cyber Situational Awareness in a Cyber Security Game involving Recommendations

Palvi Aggarwal, Frederic Moisan (), Cleotilde Gonzalez and Varun Dutt
Additional contact information
Palvi Aggarwal: IIT Mandi - Indian Institute of Technology Mandi, CMU - Carnegie Mellon University [Pittsburgh]
Frederic Moisan: CMU - Carnegie Mellon University [Pittsburgh]
Cleotilde Gonzalez: CMU - Carnegie Mellon University [Pittsburgh]
Varun Dutt: IIT Mandi - Indian Institute of Technology Mandi

Post-Print from HAL

Abstract: Intrusion Detection Systems (IDSs) help in creating cyber situational awareness for defenders by providing recommendations. Prior research in simulation and game-theory has revealed that the presence and accuracy of IDS-like recommendations influence the decisions of defenders and adversaries. In the current paper, we present novel analyses of prior research by analyzing the sequential decisions of defenders and adversaries over repeated trials. Specifically, we developed computational cognitive models based upon Instance-Based Learning Theory (IBLT) to capture the dynamics of the sequential decisions made by defenders and adversaries across numerous conditions that differed in the IDS's availability and accuracy. We found that cognitive mechanisms based upon recency, frequency, and variability helped account for adversarial and defender decisions better than the optimal Nash solutions. We discuss the implications of our results for adversarial-and-defender decisions in the cyber-world.

Keywords: Behavioral cyber-security; simulated defenders; simulated adversary; Intrusion detection systems; situation awareness; alerts; cybersecurity game; Instance-based Learning Theory (search for similar items in EconPapers)
Date: 2018-12-01
Note: View the original document on HAL open archive server: https://hal.science/hal-03188216v1
References: View complete reference list from CitEc
Citations:

Published in International Journal On Cyber Situational Awareness, 2018, 3 (1), 11-38 p. ⟨10.22619/IJCSA.2018.100118⟩

Downloads: (external link)
https://hal.science/hal-03188216v1/document (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:hal:journl:hal-03188216

DOI: 10.22619/IJCSA.2018.100118

Access Statistics for this paper

More papers in Post-Print from HAL
Bibliographic data for series maintained by CCSD ().