215 citations · 1.5k across the 185 of their papers we have counts for
36 papers · 1 filter
The Doctrine of Cyber Effect: An Ethics Framework for Defensive Cyber Deception
Quanyan Zhu
The lack of established rules and regulations in cyberspace is attributed to the absence of agreed-upon ethical principles, making it difficult to establish accountability, regulat…
An Introduction of System-Scientific Approaches to Cognitive Security
Linan Huang, Quanyan Zhu
Human cognitive capacities and the needs of human-centric solutions for "Industry 5.0" make humans an indispensable component in Cyber-Physical Systems (CPSs), referred to as Human…
On the Role of Risk Perceptions in Cyber Insurance Contracts
Shutian Liu, Quanyan Zhu
Risk perceptions are essential in cyber insurance contracts. With the recent surge of information, human risk perceptions are exposed to the influences from both beneficial knowled…
Game-Theoretic Neyman-Pearson Detection to Combat Strategic Evasion
Yinan Hu, Juntao Chen, Quanyan Zhu
The security in networked systems depends greatly on recognizing and identifying adversarial behaviors. Traditional detection methods focus on specific categories of attacks and ha…
Accountability and Insurance in IoT Supply Chain
Yunfei Ge, Quanyan Zhu
Supply chain security has become a growing concern in security risk analysis of the Internet of Things (IoT) systems. Their highly connected structures have significantly enlarged…
RADAMS: Resilient and Adaptive Alert and Attention Management Strategy against Informational Denial-of-Service (IDoS) Attacks
Linan Huang, Quanyan Zhu
Attacks exploiting human attentional vulnerability have posed severe threats to cybersecurity. In this work, we identify and formally define a new type of proactive attentional att…
Combating Informational Denial-of-Service (IDoS) Attacks: Modeling and Mitigation of Attentional Human Vulnerability
Linan Huang, Quanyan Zhu
This work proposes a new class of proactive attacks called the Informational Denial-of-Service (IDoS) attacks that exploit the attentional human vulnerability. By generating a larg…
Reinforcement Learning for Feedback-Enabled Cyber Resilience
Yunhan Huang, Linan Huang, Quanyan Zhu
Digitization and remote connectivity have enlarged the attack surface and made cyber systems more vulnerable. As attackers become increasingly sophisticated and resourceful, mere r…
Differentially Private Collaborative Intrusion Detection Systems For VANETs
Tao Zhang, Quanyan Zhu
Vehicular ad hoc network (VANET) is an enabling technology in modern transportation systems for providing safety and valuable information, and yet vulnerable to a number of attacks…
Security of Distributed Machine Learning: A Game-Theoretic Approach to Design Secure DSVM
Rui Zhang, Quanyan Zhu
Distributed machine learning algorithms play a significant role in processing massive data sets over large networks. However, the increasing reliance on machine learning on informa…
Modeling and Assessment of IoT Supply Chain Security Risks: The Role of Structural and Parametric Uncertainties
Timothy Kieras, Muhammad Junaid Farooq, Quanyan Zhu
Supply chain security threats pose new challenges to security risk modeling techniques for complex ICT systems such as the IoT. With established techniques drawn from attack trees…
A Receding-Horizon MDP Approach for Performance Evaluation of Moving Target Defense in Networks
Zhentian Qian, Jie Fu, Quanyan Zhu
In this paper, we study the problem of assessing the effectiveness of a proactive defense-by-detection policy with a network-based moving target defense. We model the network syste…
RIoTS: Risk Analysis of IoT Supply Chain Threats
Timothy Kieras, Muhammad Junaid Farooq, Quanyan Zhu
Securing the supply chain of information and communications technology (ICT) has recently emerged as a critical concern for national security and integrity. With the proliferation…
FlipIn: A Game-Theoretic Cyber Insurance Framework for Incentive-Compatible Cyber Risk Management of Internet of Things
Rui Zhang, Quanyan Zhu
Internet of Things (IoT) is highly vulnerable to emerging Advanced Persistent Threats (APTs) that are often operated by well-resourced adversaries. Achieving perfect security for I…
IoT Supply Chain Security: Overview, Challenges, and the Road Ahead
Muhammad Junaid Farooq, Quanyan Zhu
Supply chain is emerging as the next frontier of threats in the rapidly evolving IoT ecosystem. It is fundamentally more complex compared to traditional ICT systems. We analyze sup…
Strategic Learning for Active, Adaptive, and Autonomous Cyber Defense
Linan Huang, Quanyan Zhu
The increasing instances of advanced attacks call for a new defense paradigm that is active, autonomous, and adaptive, named as the \texttt{`3A'} defense paradigm. This chapter int…
Adaptive Honeypot Engagement through Reinforcement Learning of Semi-Markov Decision Processes
Linan Huang, Quanyan Zhu
A honeynet is a promising active cyber defense mechanism. It reveals the fundamental Indicators of Compromise (IoCs) by luring attackers to conduct adversarial behaviors in a contr…
Game-Theoretic Analysis of Cyber Deception: Evidence-Based Strategies and Dynamic Risk Mitigation
Tao Zhang, Linan Huang, Jeffrey Pawlick +1
Deception is a technique to mislead human or computer systems by manipulating beliefs and information. For the applications of cyber deception, non-cooperative games become a natur…
A Game-Theoretic Foundation of Deception: Knowledge Acquisition and Fundamental Limits
Tao Zhang, Quanyan zhu
Deception is a technique to mislead human or computer systems by manipulating beliefs and information. Successful deception is characterized by the information-asymmetric, dynamic,…
Game Theory Meets Network Security: A Tutorial at ACM CCS
Quanyan Zhu, Stefan Rass
The increasingly pervasive connectivity of today's information systems brings up new challenges to security. Traditional security has accomplished a long way toward protecting well…
iSTRICT: An Interdependent Strategic Trust Mechanism for the Cloud-Enabled Internet of Controlled Things
Jeffrey Pawlick, Juntao Chen, Quanyan Zhu
The cloud-enabled Internet of controlled things (IoCT) envisions a network of sensors, controllers, and actuators connected through a local cloud in order to intelligently control…
Modeling and Analysis of Leaky Deception using Signaling Games with Evidence
Jeffrey Pawlick, Edward Colbert, Quanyan Zhu
Deception plays critical roles in economics and technology, especially in emerging interactions in cyberspace. Holistic models of deception are needed in order to analyze interacti…
Optimal Cyber-Insurance Contract Design for Dynamic Risk Management and Mitigation
Rui Zhang, Quanyan Zhu
With the recent growing number of cyberattacks and the constant lack of effective defense methods, cyber risks become ubiquitous in enterprise networks, manufacturing plants, and g…
A Game-Theoretic Taxonomy and Survey of Defensive Deception for Cybersecurity and Privacy
Jeffrey Pawlick, Edward Colbert, Quanyan Zhu
Cyberattacks on both databases and critical infrastructure have threatened public and private sectors. Ubiquitous tracking and wearable computing have infringed upon privacy. Advoc…