Protecting shared information in networks: a network security game with strategic attacks

Bram de Witte, Paolo Frasca, Bastiaan Overvest, Judith Timmer

Research output: Book/ReportReportOther research output

71 Downloads (Pure)

Abstract

A digital security breach, by which confidential information is leaked, does not only affect the agent whose system is infiltrated, but is also detrimental to other agents socially connected to the infiltrated system. Although it has been argued that these externalities create incentives to under-invest in security, this presumption is challenged by the possibility of strategic adversaries attacking the least protected agents. In this paper we study a new model of security games in which agents share tokens of information in a network. The agents have the opportunity to invest in security to protect against an attack that can either be strategic or random. In presence of a random attack under-investments indeed prevail. In presence of a strategic attack, we show that when dependencies among agents are low, because the information network is sparse or because the probability that information is shared is small, agents in fact tend to invest more in security than socially optimal. These over-investments pass on to under-investments when information sharing is more likely.
Original languageEnglish
Place of PublicationEnschede
PublisherDepartment of Applied Mathematics, University of Twente
Number of pages23
Volume2065
Publication statusPublished - 2018

Publication series

NameMemorandum of the Department of Applied Mathematics
ISSN (Print)1874-4850

Fingerprint

Network Security
Attack
Game
Externalities
Agent Systems
Information Sharing
Incentives
Likely
Tend

Keywords

  • network security
  • information dissemination
  • Stackelberg game
  • Equilibrium

Cite this

de Witte, B., Frasca, P., Overvest, B., & Timmer, J. (2018). Protecting shared information in networks: a network security game with strategic attacks. (Memorandum of the Department of Applied Mathematics). Enschede: Department of Applied Mathematics, University of Twente.
de Witte, Bram ; Frasca, Paolo ; Overvest, Bastiaan ; Timmer, Judith. / Protecting shared information in networks : a network security game with strategic attacks. Enschede : Department of Applied Mathematics, University of Twente, 2018. 23 p. (Memorandum of the Department of Applied Mathematics).
@book{1d18c13343d142b2a5e914df476402ed,
title = "Protecting shared information in networks: a network security game with strategic attacks",
abstract = "A digital security breach, by which confidential information is leaked, does not only affect the agent whose system is infiltrated, but is also detrimental to other agents socially connected to the infiltrated system. Although it has been argued that these externalities create incentives to under-invest in security, this presumption is challenged by the possibility of strategic adversaries attacking the least protected agents. In this paper we study a new model of security games in which agents share tokens of information in a network. The agents have the opportunity to invest in security to protect against an attack that can either be strategic or random. In presence of a random attack under-investments indeed prevail. In presence of a strategic attack, we show that when dependencies among agents are low, because the information network is sparse or because the probability that information is shared is small, agents in fact tend to invest more in security than socially optimal. These over-investments pass on to under-investments when information sharing is more likely.",
keywords = "network security, information dissemination, Stackelberg game, Equilibrium",
author = "{de Witte}, Bram and Paolo Frasca and Bastiaan Overvest and Judith Timmer",
year = "2018",
language = "English",
volume = "2065",
series = "Memorandum of the Department of Applied Mathematics",
publisher = "Department of Applied Mathematics, University of Twente",

}

de Witte, B, Frasca, P, Overvest, B & Timmer, J 2018, Protecting shared information in networks: a network security game with strategic attacks. Memorandum of the Department of Applied Mathematics, vol. 2065, Department of Applied Mathematics, University of Twente, Enschede.

Protecting shared information in networks : a network security game with strategic attacks. / de Witte, Bram; Frasca, Paolo ; Overvest, Bastiaan; Timmer, Judith.

Enschede : Department of Applied Mathematics, University of Twente, 2018. 23 p. (Memorandum of the Department of Applied Mathematics).

Research output: Book/ReportReportOther research output

TY - BOOK

T1 - Protecting shared information in networks

T2 - a network security game with strategic attacks

AU - de Witte, Bram

AU - Frasca, Paolo

AU - Overvest, Bastiaan

AU - Timmer, Judith

PY - 2018

Y1 - 2018

N2 - A digital security breach, by which confidential information is leaked, does not only affect the agent whose system is infiltrated, but is also detrimental to other agents socially connected to the infiltrated system. Although it has been argued that these externalities create incentives to under-invest in security, this presumption is challenged by the possibility of strategic adversaries attacking the least protected agents. In this paper we study a new model of security games in which agents share tokens of information in a network. The agents have the opportunity to invest in security to protect against an attack that can either be strategic or random. In presence of a random attack under-investments indeed prevail. In presence of a strategic attack, we show that when dependencies among agents are low, because the information network is sparse or because the probability that information is shared is small, agents in fact tend to invest more in security than socially optimal. These over-investments pass on to under-investments when information sharing is more likely.

AB - A digital security breach, by which confidential information is leaked, does not only affect the agent whose system is infiltrated, but is also detrimental to other agents socially connected to the infiltrated system. Although it has been argued that these externalities create incentives to under-invest in security, this presumption is challenged by the possibility of strategic adversaries attacking the least protected agents. In this paper we study a new model of security games in which agents share tokens of information in a network. The agents have the opportunity to invest in security to protect against an attack that can either be strategic or random. In presence of a random attack under-investments indeed prevail. In presence of a strategic attack, we show that when dependencies among agents are low, because the information network is sparse or because the probability that information is shared is small, agents in fact tend to invest more in security than socially optimal. These over-investments pass on to under-investments when information sharing is more likely.

KW - network security

KW - information dissemination

KW - Stackelberg game

KW - Equilibrium

M3 - Report

VL - 2065

T3 - Memorandum of the Department of Applied Mathematics

BT - Protecting shared information in networks

PB - Department of Applied Mathematics, University of Twente

CY - Enschede

ER -

de Witte B, Frasca P, Overvest B, Timmer J. Protecting shared information in networks: a network security game with strategic attacks. Enschede: Department of Applied Mathematics, University of Twente, 2018. 23 p. (Memorandum of the Department of Applied Mathematics).