Finding Optimal Moving Target Defense Strategies: A Resilience Booster for Connected Cars

During their life-cycle, modern connected cars will have to face various and changing security threats. As for any critical embedded system, security fixes in the form of software updates need to be thoroughly verified and cannot be deployed on a daily basis. The system needs to commit to a defense...

Full description

Bibliographic Details
Main Authors: Maxime Ayrault, Ulrich Kühne, Étienne Borde
Format: Article
Language:English
Published: MDPI AG 2022-05-01
Series:Information
Subjects:
Online Access:https://www.mdpi.com/2078-2489/13/5/242
_version_ 1797498998840360960
author Maxime Ayrault
Ulrich Kühne
Étienne Borde
author_facet Maxime Ayrault
Ulrich Kühne
Étienne Borde
author_sort Maxime Ayrault
collection DOAJ
description During their life-cycle, modern connected cars will have to face various and changing security threats. As for any critical embedded system, security fixes in the form of software updates need to be thoroughly verified and cannot be deployed on a daily basis. The system needs to commit to a defense strategy, while attackers can examine vulnerabilities and prepare possible exploits before attacking. In order to break this asymmetry, it can be advantageous to use proactive defenses, such as reconfiguring parts of the system configuration. However, resource constraints and losses in quality of service need to be taken into account for such Moving Target Defenses (MTDs). In this article, we present a game-theoretic model that can be used to compute an optimal MTD defense for a critical embedded system that is facing several attackers with different objectives. The game is resolved using off-the-shelf MILP solvers. We validated the method with an automotive use case and conducted extensive experiments to evaluate its scalability and stability.
first_indexed 2024-03-10T03:41:10Z
format Article
id doaj.art-0c187aaadb1d4b74842fd4412c84efc8
institution Directory Open Access Journal
issn 2078-2489
language English
last_indexed 2024-03-10T03:41:10Z
publishDate 2022-05-01
publisher MDPI AG
record_format Article
series Information
spelling doaj.art-0c187aaadb1d4b74842fd4412c84efc82023-11-23T11:30:12ZengMDPI AGInformation2078-24892022-05-0113524210.3390/info13050242Finding Optimal Moving Target Defense Strategies: A Resilience Booster for Connected CarsMaxime Ayrault0Ulrich Kühne1Étienne Borde2Télécom Paris, Institut Polytechnique de Paris, Information Processing and Communications Laboratory (LTCI), 91120 Palaiseau, FranceTélécom Paris, Institut Polytechnique de Paris, Information Processing and Communications Laboratory (LTCI), 91120 Palaiseau, FranceTélécom Paris, Institut Polytechnique de Paris, Information Processing and Communications Laboratory (LTCI), 91120 Palaiseau, FranceDuring their life-cycle, modern connected cars will have to face various and changing security threats. As for any critical embedded system, security fixes in the form of software updates need to be thoroughly verified and cannot be deployed on a daily basis. The system needs to commit to a defense strategy, while attackers can examine vulnerabilities and prepare possible exploits before attacking. In order to break this asymmetry, it can be advantageous to use proactive defenses, such as reconfiguring parts of the system configuration. However, resource constraints and losses in quality of service need to be taken into account for such Moving Target Defenses (MTDs). In this article, we present a game-theoretic model that can be used to compute an optimal MTD defense for a critical embedded system that is facing several attackers with different objectives. The game is resolved using off-the-shelf MILP solvers. We validated the method with an automotive use case and conducted extensive experiments to evaluate its scalability and stability.https://www.mdpi.com/2078-2489/13/5/242moving target defensegame theoryautomotive systems
spellingShingle Maxime Ayrault
Ulrich Kühne
Étienne Borde
Finding Optimal Moving Target Defense Strategies: A Resilience Booster for Connected Cars
Information
moving target defense
game theory
automotive systems
title Finding Optimal Moving Target Defense Strategies: A Resilience Booster for Connected Cars
title_full Finding Optimal Moving Target Defense Strategies: A Resilience Booster for Connected Cars
title_fullStr Finding Optimal Moving Target Defense Strategies: A Resilience Booster for Connected Cars
title_full_unstemmed Finding Optimal Moving Target Defense Strategies: A Resilience Booster for Connected Cars
title_short Finding Optimal Moving Target Defense Strategies: A Resilience Booster for Connected Cars
title_sort finding optimal moving target defense strategies a resilience booster for connected cars
topic moving target defense
game theory
automotive systems
url https://www.mdpi.com/2078-2489/13/5/242
work_keys_str_mv AT maximeayrault findingoptimalmovingtargetdefensestrategiesaresilienceboosterforconnectedcars
AT ulrichkuhne findingoptimalmovingtargetdefensestrategiesaresilienceboosterforconnectedcars
AT etienneborde findingoptimalmovingtargetdefensestrategiesaresilienceboosterforconnectedcars