Patent Document ID: 9954897
Application ID: 15057234
Patent Flag: 1

Claim One:
1. A cyber security system, comprising: network servers, passive network sensors, and active network sensors in a cyber network; a computer with data network access and programmed for a three-sided game-theoretic analysis of interactions among cyber attackers, the passive network sensors, and the active network sensors, wherein the network servers are targets of the cyber attackers; wherein the passive network sensors and the active network sensors are defenders; wherein the passive network sensors are a Snort-based Passive Network Sensor (PNS) and the active network sensors are a Honeypot based Active Network Sensor (ANS); wherein the passive network sensors are controlled by PNS engine and the active network sensors are controlled by ANS engine, wherein the PNS engine and ANS engine are coordinated to defend against the cyber attackers and are reconfigured by implementing a mixed Nash equilibrium of the three-sided game-theoretic analysis; the honeypot, including the active network sensors, acting as an active side and camouflaged in the data network to help passive network sensors detect and track cyber network attacks originated from the cyber attackers; and wherein the passive network sensors monitor data network traffic and interacting with the honeypot, wherein the PNS engine choice (s k ), and the ANS engine choice (h k ) are combined and coordinated to defend against the cyber attackers computed best response (r k ), wherein: k>=1; h k , s k and r k are all scalar values; a set of r k of the cyber attackers are used to determine an action surface, and a set of s k and h k are combined and coordinated to obtain an action curve; and an intersection point of the action surface and the action curve are calculated according to a geometric solution, wherein the intersection point of the action surface and the action curve is used to calculate a solution of the mixed Nash equilibrium of the three-sided game theoretic analysis to provide a closed loop control paradigm.