Information Assurance

8.4. Defining and Solving the Game

To compute the expected attacker behavior by means of a stochastic game, the procedure is as follows.

Step 1: Identify the Game Elements

The first step is to identify the game elements. From the stochastic model, pick all states in S where the system is vulnerable to intrusions. Each of these states can be viewed as a game element Γ_i in a two-player, zero-sum stochastic game with state set Γ. For example, in Figure 8.6, the gray states V, L, and IS represent states where the system is vulnerable to one or more attack actions. Hence, the set of game elements for this model is Γ = {Γ_V,Γ_L, Γ_IS}. Note that even though the system state space S may be very large, the corresponding set with game elements Γ will often ...