Security protection design for deception and real system regimes: A model and analysis ?
In this paper, we model a possible deception system with the explicit purpose of enticing unauthorized users and restricting their access to the real system. The proposed model represents a system designers defensive actions against intruders in a way that maximizes the difference between the intruders cost and the system designers cost of system protection. Under the assumption of a dual entity system, the proposed model shows that intruders differ in behavior depending on the systems vulnerability at the time of intrusion as well as depending on their own economic incentives. The optimal results of the proposed model provide the system designer with insights on how to configure the level of protection for the two systems.
deception system decision analysis information security economic model