{"id":1335,"date":"2018-07-19T17:45:21","date_gmt":"2018-07-20T00:45:21","guid":{"rendered":"https:\/\/blogs.ubc.ca\/genemoolee\/?p=1335"},"modified":"2023-02-21T11:10:11","modified_gmt":"2023-02-21T18:10:11","slug":"misinformation-optimal-detect-time-working-paper","status":"publish","type":"post","link":"https:\/\/blogs.ubc.ca\/genemoolee\/2018\/07\/19\/misinformation-optimal-detect-time-working-paper\/","title":{"rendered":"Security Defense against Long-term and Stealthy Cyberattacks (DSS 2023)"},"content":{"rendered":"<h4>Kookyoung Han, Choi, Jin Hyuk, Yun-Sik Choi, <b><span style=\"text-decoration: underline;\">Gene Moo Lee,<\/span><\/b> Andrew B. Whinston (2023) <a href=\"https:\/\/www.sciencedirect.com\/science\/article\/pii\/S016792362200183X\" target=\"_blank\" rel=\"noopener\">Security Defense against Long-term and Stealthy Cyberattacks<\/a>. <em><strong>Decision Support Systems<\/strong>, <\/em>166: 113912<em>.<\/em><\/h4>\n<ul>\n<li>Funded by NSF (<a href=\"https:\/\/www.nsf.gov\/awardsearch\/showAward?AWD_ID=1718600\" target=\"_blank\" rel=\"noopener noreferrer\">Award #1718600<\/a>) and UNIST<\/li>\n<li>Best Paper Award at KrAIS 2017<\/li>\n<li>Presented at UT Austin (2017), UNIST (2017), INFORMS (Houston, TX 2017), CIST (Houston, TX 2017), <a href=\"http:\/\/witsconf.org\/wits2017\/\" target=\"_blank\" rel=\"noopener noreferrer\">WITS (Seoul, Korea 2017)<\/a>, and <a href=\"http:\/\/krais.org\/\" target=\"_blank\" rel=\"noopener noreferrer\">KrAIS (Seoul, Korea 2017)<\/a><\/li>\n<li>Previous titles: &#8220;Misinformation and Optimal Time to Detect&#8221;, &#8220;Optimal Stopping and Strategic Espionage&#8221;, &#8220;To Disconnect or Not: A Cybersecurity Game&#8221;<\/li>\n<\/ul>\n<div id=\"abstracts\" class=\"Abstracts u-font-gulliver text-s\">\n<div id=\"ab010\" class=\"abstract author\" lang=\"en\">\n<div id=\"as010\">\n<p id=\"sp010\">Modern cyberattacks such as\u00a0advanced persistent threats\u00a0have become sophisticated. Hackers can stay undetected for an extended time and defenders do not have sufficient countermeasures to prevent advanced cyberattacks. Reflecting on this phenomenon, we propose a game-theoretic model to analyze strategic decisions made by a hacker and a defender in equilibrium. In our game model, the hacker launches stealthy cyberattacks for a long time and the defender decides when to disable a suspicious user based on noisy observations of the user\u2019s activities. Damages caused by the hacker can be enormous if the defender does not immediately ban a suspicious user under certain circumstances, which can explain the emerging sophisticated cyberattacks with detrimental consequences. Our model also predicts that the hacker may opt to be behavioral to avoid worst cases. This is because behavioral cyberattacks are less threatening and the defender decides not to immediately block a suspicious user to reduce cost of false detection.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<ul id=\"issue-navigation\" class=\"issue-navigation u-margin-s-bottom u-bg-grey1\"><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Kookyoung Han, Choi, Jin Hyuk, Yun-Sik Choi, Gene Moo Lee, Andrew B. Whinston (2023) Security Defense against Long-term and Stealthy Cyberattacks. Decision Support Systems, 166: 113912. Funded by NSF (Award #1718600) and UNIST Best Paper Award at KrAIS 2017 Presented at UT Austin (2017), UNIST (2017), INFORMS (Houston, TX 2017), CIST (Houston, TX 2017), WITS [&hellip;]<\/p>\n","protected":false},"author":51140,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2267],"tags":[45237,2467065,690047,45130,45148,45263,45149,6306,45236],"class_list":["post-1335","post","type-post","status-publish","format-standard","hentry","category-publications","tag-bayesian-learning","tag-cybersecurity","tag-game-theory","tag-information-asymmetry","tag-managed-security-service-with-warranty","tag-misinformation","tag-optimal-stopping","tag-risk","tag-sequential-hypothesis-testing"],"_links":{"self":[{"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/posts\/1335","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/users\/51140"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/comments?post=1335"}],"version-history":[{"count":42,"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/posts\/1335\/revisions"}],"predecessor-version":[{"id":4094,"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/posts\/1335\/revisions\/4094"}],"wp:attachment":[{"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/media?parent=1335"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/categories?post=1335"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.ubc.ca\/genemoolee\/wp-json\/wp\/v2\/tags?post=1335"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}