🤖 AI Summary
This work addresses the limited defensive capabilities in cyber-physical systems by proposing a multilayer collaborative deception strategy. The approach models attacker-defender interactions as a Stackelberg game and leverages real-world vulnerability data from the National Vulnerability Database (NVD) along with CVSS scores to synchronously deploy deception nodes across both cyber and physical domains, thereby disrupting adversarial reconnaissance. A novel CVE-based utility function is designed to identify critical vulnerabilities and enable coordinated optimization of deception resources across domains. Experimental results demonstrate that the proposed method significantly enhances defender utility under both CVSS v2 and v3 metrics, outperforming single-layer and baseline defense schemes, and effectively overcomes the limitations of traditional single-domain defense strategies.
📝 Abstract
This paper explores coordinated deception strategies by synchronizing defenses across coupled cyber and physical systems to mislead attackers and strengthen defense mechanisms. We introduce a Stackelberg game framework to model the strategic interaction between defenders and attackers, where the defender leverages CVSS-based exploit probabilities and real-world vulnerability data from the National Vulnerability Database (NVD) to guide the deployment of deception. Cyber and physical replicas are used to disrupt attacker reconnaissance and enhance defensive effectiveness. We propose a CVE-based utility function to identify the most critical vulnerabilities and demonstrate that coordinated multilayer deception outperforms single-layer and baseline strategies in improving defender utility across both CVSS versions.