Reflexive control over intruder using deception systems

Abstract

Confrontation between a security administrator and an intruder is presented as an information security conflict. An approach to formalization of this conflict on the basis of Lefebvre’s algebra of conflicts has been proposed. Possible behavior strategies of conflict participants have been analyzed and identified those being most effective in terms of protection. These strategies are proposed to be implemented by using deception systems. A generalized model of IS security threats has been developed which links information security offenders of various types to critical objects of the protected IS. It has been also identified a subset of critical IS objects in order to arrange “traps” in the deception system implementing reflexive control over external intruder. A concept of the adaptive deception system based on maximizing the length of the graph describing the actions of the attacker in a deception system has been suggested.