Deception, which includes leading cyber-attackers astray with false information, has shown to be an effective method of thwarting cyber-attacks. There has been little investigation of the effect of probing action costs on adversarial decision-making, despite earlier studies on deception in cybersecurity focusing primarily on variables like network size and the percentage of honeypots utilized in games. Understanding human decision-making when prompted with choices of various costs is essential in many areas such as in cyber security. In this paper, we will use a deception game (DG) to examine different costs of probing on adversarial decisions. To achieve this we utilized an IBLT model and a delayed feedback mechanism to mimic knowledge of human actions. Our results were taken from an even split of deception and no deception to compare each influence. It was concluded that probing was slightly taken less as the cost of probing increased. The proportion of attacks stayed relatively the same as the cost of probing increased. Although a constant cost led to a slight decrease in attacks. Overall, our results concluded that the different probing costs do not have an impact on the proportion of attacks whereas it had a slightly noticeable impact on the proportion of probing.
翻译:欺骗,包括用虚假信息误导网络攻击者,已被证明是阻止网络攻击的有效方法。尽管先前关于网络安全欺骗的研究主要关注网络规模和博弈中使用的蜜罐比例等变量,但关于探测行动成本对对抗决策影响的研究却很少。在网络安全等众多领域中,理解人类在面对不同成本的选项时的决策过程至关重要。本文利用欺骗博弈(DG)来考察不同探测成本对对抗决策的影响。为此,我们采用了IBLT模型和延迟反馈机制来模拟人类行为的认知过程。我们的结果来自欺骗与无欺骗的均等分布,以比较各自的影响。结论表明,随着探测成本的增加,探测行为略有减少。随着探测成本的增加,攻击比例保持相对稳定。尽管固定成本导致攻击次数略有下降。总体而言,我们的结果得出结论:不同的探测成本对攻击比例没有影响,而对探测比例有轻微显著的影响。