Title: Efficient network security as a strategic game

Authors: Fari Schlake; Lamine Mili

Addresses: Bradley Department of Electrical and Computer Engineering, Virginia Tech, Falls Church, VA 2204, USA ' Bradley Department of Electrical and Computer Engineering, Virginia Tech, Falls Church, VA 22043, USA

Abstract: We implement game and mechanism design theories to develop a network-wide autonomous consumer-centric and delay-efficient security protocol, DSIC-S. It induces a dominant strategy incentive compatible equilibrium among all rational and selfish nodes. We show that our protocol is network-wide socially desirable and Pareto optimal. DSIC-S guarantees the delivery of consumer's security services within desired levels, naturally and trustfully, reinforced by our nesting security model. We address resource management and delay-efficiency through synergy of several design aspects. We propose a scenario-based security model with different levels. We incorporate a valuation system to integrate the caused delay at each node in selection of security algorithms without consumer's knowledge of the actual delays. We achieve this by incorporating our valuation system, in particular that of the consumer's, in the calculation of the credit transfers with Vickrey-Clarke-Groves (VCG) payments and Clarke's pivotal rule. We prove that DSIC-S design solves the revelation theorem's problem of misrepresentation of agents' private information in mechanism design theory. We propose an incentive model and incorporate the valuations in these incentives. The simulations validate our theoretical results. They prove the significance of our model and show the correlation of the credit transfers to actual delays and security valuations.

Keywords: strategic form games; mechanism design theory; game theory; incentive compatibility; dominant strategy; protocol design; cyber security; performance optimisation; network management; network security; strategic games; simulation; credit transfers; actual delays; security valuation.

DOI: 10.1504/IJCIS.2013.054968

International Journal of Critical Infrastructures, 2013 Vol.9 No.3, pp.243 - 273

Published online: 28 Apr 2014 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article