An evolutionary game analysis of the interaction with firewall and intrusion detection system

• Published in: 2009 International Conference on Machine Learning and Cybernetics Vol. 5; pp. 2787 - 2791
• Main Authors: Ying Yin, Zi-Chao Xia
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01.07.2009
• Subjects: Costs; Cybernetics; Decision making; Electronic mail; Evolutionary game theory; firewall; Game theory; Information analysis; Information security; Intrusion detection; intrusion detection system; Machine learning; Protection
• ISBN: 9781424437023; 1424437024
• ISSN: 2160-133X
• DOI: 10.1109/ICMLC.2009.5212647

This paper makes study of interaction with firewall and intrusion detection system and presents the game theory model of interaction between these two systems and factors that play important roles in the process of interaction between them. In addition, a new interaction system is also discussed, which is based on decision-making modules. This paper introduces the analysis of evolutionary game theory into the study of active protection mechanism of security system in creative way. It breaks through the conventional game theory and creatively regards that behavior subject of game theory model are bounded rational group which is comprised by many participators, and pays more attention to the strategy adjustment process of participators and the stability they could keep. The profit matrix referred in the paper is set up in cost-benefit setting mode. It puts response cost factor into consideration during active strategy movement of network security system devices, which has a great practical value.