{"id":"https://openalex.org/W2903765663","doi":"https://doi.org/10.1109/tifs.2018.2885251","title":"Effective Repair Strategy Against Advanced Persistent Threat: A Differential Game Approach","display_name":"Effective Repair Strategy Against Advanced Persistent Threat: A Differential Game Approach","publication_year":2018,"publication_date":"2018-12-06","ids":{"openalex":"https://openalex.org/W2903765663","doi":"https://doi.org/10.1109/tifs.2018.2885251","mag":"2903765663"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2018.2885251","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2018.2885251","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://figshare.com/articles/journal_contribution/Effective_repair_strategy_against_advanced_persistent_threat_A_differential_game_approach/20780080","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012015574","display_name":"Lu\u2010Xing Yang","orcid":"https://orcid.org/0000-0002-9229-5787"},"institutions":[{"id":"https://openalex.org/I149704539","display_name":"Deakin University","ror":"https://ror.org/02czsnj07","country_code":"AU","type":"education","lineage":["https://openalex.org/I149704539"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Lu-Xing Yang","raw_affiliation_strings":["School of Information Technology, Deakin University, Burwood, VIC, Australia"],"affiliations":[{"raw_affiliation_string":"School of Information Technology, Deakin University, Burwood, VIC, Australia","institution_ids":["https://openalex.org/I149704539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063743533","display_name":"Pengdeng Li","orcid":"https://orcid.org/0000-0002-5549-3864"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pengdeng Li","raw_affiliation_strings":["School of Big Data and Software Engineering, Chongqing University, Chongqing, China"],"affiliations":[{"raw_affiliation_string":"School of Big Data and Software Engineering, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085698418","display_name":"Yushu Zhang","orcid":"https://orcid.org/0000-0001-8183-8435"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yushu Zhang","raw_affiliation_strings":["Collaborative Innovation Center of Novel Software Technology and Industrialization, Nanjing, China"],"affiliations":[{"raw_affiliation_string":"Collaborative Innovation Center of Novel Software Technology and Industrialization, Nanjing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101464927","display_name":"Xiaofan Yang","orcid":"https://orcid.org/0000-0001-6931-2692"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaofan Yang","raw_affiliation_strings":["School of Big Data and Software Engineering, Chongqing University, Chongqing, China"],"affiliations":[{"raw_affiliation_string":"School of Big Data and Software Engineering, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051297830","display_name":"Yong Xiang","orcid":"https://orcid.org/0000-0003-3545-7863"},"institutions":[{"id":"https://openalex.org/I149704539","display_name":"Deakin University","ror":"https://ror.org/02czsnj07","country_code":"AU","type":"education","lineage":["https://openalex.org/I149704539"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yong Xiang","raw_affiliation_strings":["School of Information Technology, Deakin University, Burwood, VIC, Australia"],"affiliations":[{"raw_affiliation_string":"School of Information Technology, Deakin University, Burwood, VIC, Australia","institution_ids":["https://openalex.org/I149704539"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051406984","display_name":"Wanlei Zhou","orcid":"https://orcid.org/0000-0002-1680-2521"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Wanlei Zhou","raw_affiliation_strings":["School of Software, University of Technology Sydney, Ultimo, NSW, Australia"],"affiliations":[{"raw_affiliation_string":"School of Software, University of Technology Sydney, Ultimo, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5012015574"],"corresponding_institution_ids":["https://openalex.org/I149704539"],"apc_list":null,"apc_paid":null,"fwci":8.1413,"has_fulltext":false,"cited_by_count":106,"citation_normalized_percentile":{"value":0.98395262,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"14","issue":"7","first_page":"1713","last_page":"1728"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9868000149726868,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9868000149726868,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9861999750137329,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9721999764442444,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/nash-equilibrium","display_name":"Nash equilibrium","score":0.8499789237976074},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.729425847530365},{"id":"https://openalex.org/keywords/game-theory","display_name":"Game theory","score":0.5183233022689819},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5132279396057129},{"id":"https://openalex.org/keywords/differential-game","display_name":"Differential game","score":0.49866700172424316},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.49330249428749084},{"id":"https://openalex.org/keywords/potential-game","display_name":"Potential game","score":0.44901084899902344},{"id":"https://openalex.org/keywords/best-response","display_name":"Best response","score":0.424605131149292},{"id":"https://openalex.org/keywords/operations-research","display_name":"Operations research","score":0.3460821211338043},{"id":"https://openalex.org/keywords/mathematical-economics","display_name":"Mathematical economics","score":0.18332946300506592},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.17476317286491394},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.1703433394432068},{"id":"https://openalex.org/keywords/economics","display_name":"Economics","score":0.11079975962638855},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.08179226517677307}],"concepts":[{"id":"https://openalex.org/C46814582","wikidata":"https://www.wikidata.org/wiki/Q23389","display_name":"Nash equilibrium","level":2,"score":0.8499789237976074},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.729425847530365},{"id":"https://openalex.org/C177142836","wikidata":"https://www.wikidata.org/wiki/Q44455","display_name":"Game theory","level":2,"score":0.5183233022689819},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5132279396057129},{"id":"https://openalex.org/C2779006483","wikidata":"https://www.wikidata.org/wiki/Q1973196","display_name":"Differential game","level":2,"score":0.49866700172424316},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.49330249428749084},{"id":"https://openalex.org/C2778079155","wikidata":"https://www.wikidata.org/wiki/Q288500","display_name":"Potential game","level":3,"score":0.44901084899902344},{"id":"https://openalex.org/C32407928","wikidata":"https://www.wikidata.org/wiki/Q2733833","display_name":"Best response","level":3,"score":0.424605131149292},{"id":"https://openalex.org/C42475967","wikidata":"https://www.wikidata.org/wiki/Q194292","display_name":"Operations research","level":1,"score":0.3460821211338043},{"id":"https://openalex.org/C144237770","wikidata":"https://www.wikidata.org/wiki/Q747534","display_name":"Mathematical economics","level":1,"score":0.18332946300506592},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.17476317286491394},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.1703433394432068},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.11079975962638855},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08179226517677307},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/tifs.2018.2885251","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2018.2885251","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:dro.deakin.edu.au:DU:30116145","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306402457","display_name":"Deakin Research Online (Deakin University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I149704539","host_organization_name":"Deakin University","host_organization_lineage":["https://openalex.org/I149704539"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Journal Article"},{"id":"pmh:oai:figshare.com:article/20780080","is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/Effective_repair_strategy_against_advanced_persistent_threat_A_differential_game_approach/20780080","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Text"},{"id":"pmh:oai:opus.lib.uts.edu.au:10453/133049","is_oa":false,"landing_page_url":"http://hdl.handle.net/10453/133049","pdf_url":null,"source":{"id":"https://openalex.org/S4306401357","display_name":"UTS ePRESS (University of Technology Sydney)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I114017466","host_organization_name":"University of Technology Sydney","host_organization_lineage":["https://openalex.org/I114017466"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Journal Article"}],"best_oa_location":{"id":"pmh:oai:figshare.com:article/20780080","is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/Effective_repair_strategy_against_advanced_persistent_threat_A_differential_game_approach/20780080","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4258110081","display_name":null,"funder_award_id":"61572006","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8441260951","display_name":null,"funder_award_id":"LP170100458","funder_id":"https://openalex.org/F4320334704","funder_display_name":"Australian Research Council"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320323172","display_name":"Natural Science Foundation of Chongqing","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334704","display_name":"Australian Research Council","ror":"https://ror.org/05mmh0f86"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":65,"referenced_works":["https://openalex.org/W44295252","https://openalex.org/W156783801","https://openalex.org/W350604544","https://openalex.org/W640023950","https://openalex.org/W643169967","https://openalex.org/W1019741419","https://openalex.org/W1109422923","https://openalex.org/W1529079932","https://openalex.org/W1533945010","https://openalex.org/W1689629105","https://openalex.org/W1878853999","https://openalex.org/W1908246798","https://openalex.org/W1972910244","https://openalex.org/W1982075903","https://openalex.org/W2002941278","https://openalex.org/W2008620264","https://openalex.org/W2015787697","https://openalex.org/W2039858940","https://openalex.org/W2046111848","https://openalex.org/W2075489080","https://openalex.org/W2112090702","https://openalex.org/W2118820208","https://openalex.org/W2124637492","https://openalex.org/W2223334785","https://openalex.org/W2233360186","https://openalex.org/W2255978900","https://openalex.org/W2271054620","https://openalex.org/W2308766372","https://openalex.org/W2335001735","https://openalex.org/W2408793237","https://openalex.org/W2441196741","https://openalex.org/W2465493577","https://openalex.org/W2484755634","https://openalex.org/W2509774545","https://openalex.org/W2527789129","https://openalex.org/W2537328283","https://openalex.org/W2548498961","https://openalex.org/W2560934771","https://openalex.org/W2568394246","https://openalex.org/W2582259743","https://openalex.org/W2587552375","https://openalex.org/W2604409140","https://openalex.org/W2625799128","https://openalex.org/W2720329411","https://openalex.org/W2734412659","https://openalex.org/W2734593181","https://openalex.org/W2739972002","https://openalex.org/W2762039412","https://openalex.org/W2775123340","https://openalex.org/W2789266794","https://openalex.org/W2789667377","https://openalex.org/W2808323833","https://openalex.org/W2883847230","https://openalex.org/W2888824678","https://openalex.org/W2896193913","https://openalex.org/W2962817891","https://openalex.org/W2963120360","https://openalex.org/W2963492322","https://openalex.org/W2963566194","https://openalex.org/W2963790977","https://openalex.org/W2964010858","https://openalex.org/W2986587829","https://openalex.org/W4243522648","https://openalex.org/W4291733759","https://openalex.org/W6689204191"],"related_works":["https://openalex.org/W2236801283","https://openalex.org/W2728657731","https://openalex.org/W2092374696","https://openalex.org/W1853631319","https://openalex.org/W2111030377","https://openalex.org/W1598931193","https://openalex.org/W2103821767","https://openalex.org/W4214835929","https://openalex.org/W2030545874","https://openalex.org/W2623069875"],"abstract_inverted_index":{"Advanced":[0],"persistent":[1],"threat":[2,14],"(APT)":[3],"is":[4,106,221],"a":[5,12,118,149,156,178,199,222],"new":[6],"kind":[7],"of":[8,46,72,92,101,104,160,170,202,216,225],"cyberattack":[9],"that":[10,211],"poses":[11],"serious":[13],"to":[15,36,41,51,132,141,188,231,241],"modern":[16],"society.":[17],"When":[18],"an":[19,23,81,89,161],"APT":[20,66,105,114,124,162,218],"campaign":[21],"on":[22,64],"organization":[24,82,139],"has":[25],"been":[26],"identified,":[27],"the":[28,37,43,47,52,65,70,93,99,113,129,138,168,171,190,212,226],"available":[29],"repair":[30,54,59,67,75,115,125,163,175,207,219,236],"resources":[31],"must":[32],"be":[33],"reasonably":[34],"allocated":[35],"potentially":[38],"insecure":[39],"hosts":[40],"mitigate":[42],"potential":[44,135,144,152,157,172,179,186,192,213,235],"loss":[45],"organization.":[48],"We":[49],"refer":[50],"feasible":[53],"resource":[55],"allocation":[56],"strategies":[57,76,176],"as":[58,117],"strategies.":[60,237],"This":[61],"paper":[62],"focuses":[63],"problem,":[68],"i.e.,":[69],"problem":[71,116,122],"developing":[73],"effective":[74],"for":[77,80,154],"organizations.":[78],"First,":[79],"with":[83,198],"time-varying":[84],"communication":[85],"relationship,":[86],"we":[87,111,147,166,183,209,229],"establish":[88],"evolution":[90],"model":[91,112],"organization's":[94],"expected":[95],"state,":[96],"in":[97,127,177],"which":[98,128],"impact":[100],"lateral":[102],"movement":[103],"accommodated.":[107],"On":[108],"this":[109],"basis,":[110],"differential":[119],"Nash":[120,158,180,193,214,223],"game":[121,220],"(the":[123,151],"game)":[126],"attacker":[130],"attempts":[131],"maximize":[133],"his":[134],"benefit,":[136],"and":[137,165,174,206,244],"manages":[140],"minimize":[142],"its":[143],"loss.":[145],"Second,":[146],"derive":[148],"system":[150],"system)":[153],"calculating":[155],"equilibrium":[159,215,224],"game,":[164],"examine":[167],"structure":[169],"attack":[173,205],"equilibrium.":[181],"Next,":[182],"solve":[184],"some":[185],"systems":[187],"get":[189],"corresponding":[191],"equilibria.":[194],"Finally,":[195],"by":[196],"comparison":[197],"large":[200],"number":[201],"randomly":[203],"generated":[204],"strategies,":[208],"conclude":[210],"each":[217],"game.":[227],"Therefore,":[228],"recommend":[230],"organizations":[232],"their":[233],"respective":[234],"Our":[238],"findings":[239],"help":[240],"better":[242],"understand":[243],"effectively":[245],"defend":[246],"against":[247],"APT.":[248]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":15},{"year":2023,"cited_by_count":18},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":14},{"year":2020,"cited_by_count":24},{"year":2019,"cited_by_count":15}],"updated_date":"2026-04-05T17:49:38.594831","created_date":"2025-10-10T00:00:00"}