面向卫星物联网中跨域网络攻击的协同防御整合博弈框架
A Consolidated Game Framework for Cooperative Defense Against Cross-Domain Cyber Attacks in Satellite-Enabled Internet of Things
AI总结：
针对卫星物联网跨域网络攻击的防御难题，本文构建三方安全博弈框架，通过流量定价与学习算法实现激励错位的IoT运营商与卫星服务商的协同防御，经仿真验证了该框架的有效性。
AI中文摘要：
随着卫星物联网（IoT）应用的持续普及，其复杂的多域架构日益易受跨域网络威胁。攻击者可利用被入侵的IoT设备，向用于卫星回传的IoT网关聚合的数据流中注入恶意数据包，并在传输过程中利用硬件、软件及协议漏洞危害卫星网络。与单域防御相比，在IoT设备、IoT接入网及卫星传输网层面开展的协同防御，能为跨域智能攻击提供细粒度防御。然而，量化跨域影响、纠正不同参与者间的激励错位仍是重大挑战，这使得系统化协同防御的开发成为复杂任务。为解决上述问题，本文构建了三方安全博弈框架，以刻画攻击与防御方法在地面及卫星双域的影响。利用该博弈模型，本文设计了流量定价机制，以最优方式激励IoT网络运营商（IoT-NO）阻止恶意数据包渗入卫星域。随后，本文提出高效学习算法，使IoT-NO能确定其理想的流量采样策略，卫星服务提供商（SAT-SP）能确定最优流量定价。仿真结果证实，该整合博弈在对抗跨域网络攻击、促进激励错位的IoT-NO与SAT-SP间的协同防御方面具有有效性。
英文摘要：
As the adoption of satellite-enabled Internet of Things (IoT) continues to rise, its intricate multidomain architecture becomes increasingly susceptible to cross-domain cyber threats. Attackers can exploit compromised IoT devices, inject malicious packets into data streams aggregated at the IoT gateway for satellite backhaul, and potentially endanger the satellite network during transmission by exploiting the hardware, software, and protocol vulnerabilities. Compared to single-domain defenses, cooperative defense at the IoT devices, IoT access network, and satellite transmission network provides fine-granularity defense against cross-domain intelligent attacks. However, quantifying cross-domain impacts and tilting incentive misalignment among different participants remain significant challenges, making systematic cooperative defense development a complex task. To address this, we develop a tripartite security game framework to characterize the impacts of attacks and defense methods across both the terrestrial and satellite domains. Leveraging this game model, we devise flow pricing to optimally motivate the IoT network operator (IoT-NO) to prevent malicious packet infiltration into the satellite domain. Subsequently, we propose efficient learning algorithms enabling both the IoT-NO to ascertain their ideal flow sampling strategies and the satellite service provider (SAT-SP) to determine optimal flow pricing. The simulation results corroborate the effectiveness of the consolidated game in counteracting cross-domain cyber attacks and facilitating cooperative defense between the IoT-NO and the SAT-SP with nonaligned incentives.
