Decision and Game Theory for Security: First International Conference, GameSec 2010, Berlin, Germany, November 22-23, 2010. Proceedings (Lecture Notes in Computer Science (6442))

Front Matter....Pages - Design of Network Topology in an Adversarial Environment....Pages 1-20 Optimal Information Security Investment with Penetration Testing....Pages 21-37 Tracking Games in Mobile Networks....Pages 38-57 gPath: A Game-Theoretic Path Selection Algorithm to Protect Tor’s Anonymity....Pages 58-71 When Do Firms Invest in Privacy-Preserving Technologies?....Pages 72-86 Adversarial Control in a Delay Tolerant Network....Pages 87-106 Security Interdependencies for Networked Control Systems with Identical Agents....Pages 107-122 Robust Control in Sparse Mobile Ad-Hoc Networks....Pages 123-134 A Game-Theoretical Approach for Finding Optimal Strategies in a Botnet Defense Model....Pages 135-148 ISPs and Ad Networks Against Botnet Ad Fraud....Pages 149-167 A Localization Game in Wireless Sensor Networks....Pages 168-179 Effective Multimodel Anomaly Detection Using Cooperative Negotiation....Pages 180-191 The Password Game: Negative Externalities from Weak Password Practices....Pages 192-207 Towards a Game Theoretic Authorisation Model....Pages 208-219 Disperse or Unite? A Mathematical Model of Coordinated Attack....Pages 220-233 Uncertainty in Interdependent Security Games....Pages 234-244 Attack–Defense Trees and Two-Player Binary Zero-Sum Extensive Form Games Are Equivalent....Pages 245-256 Methods and Algorithms for Infinite Bayesian Stackelberg Security Games....Pages 257-265 Back Matter....Pages - Securing complex and networked systems has become increasingly important as these systems play an indispensable role in modern life at the turn of the - formation age. Concurrently, security of ubiquitous communication, data, and computing poses novel research challenges. Security is a multi-faceted problem due to the complexity of underlying hardware, software, and network inter- pendencies as well as human and social factors. It involves decision making on multiple levels and multiple time scales, given the limited resources available to both malicious attackers and administrators defending networked systems. - cision and game theory provides a rich set of analyticalmethods and approaches to address various resource allocation and decision-making problems arising in security. This edited volume contains the contributions presented at the inaugural Conference on Decision and Game Theory for Security - GameSec 2010. These 18 articles (12 full and 6 short papers) are thematically categorized into the following six sections: – “Security investments and planning” contains two articles, which present optimization methods for (security) investments when facing adversaries. – “Privacy and anonymity” has three articles discussing location privacy, - line anonymity, and economic aspects of privacy. – “Adversarial and robust control” contains three articles, which investigate security and robustness aspects of control in networks. – “Networksecurityandbotnets”hasfourarticlesfocusingondefensivestra- giesagainstbotnetsaswellasdetectionofmaliciousadversariesinnetworks. – “Authorizationandauthentication”hasanarticleonpasswordpracticesand another one presenting a game-theoretic authorization model. – “Theory and algorithms for security” contains four articles on various th- retic and algorithmic aspects of security. This book constitutes the refereed proceedings of the First International Conference on Decision and Game Theory for Security, GameSec 2010, held in Berlin, Germany, in November 2010. The 12 revised full papers and 6 revised short papers presented were carefully reviewed and selected from numerous submissions and focus on analytical models based on game, information, communication, optimization, decision, and control theories that are applied to diverse security topics. The papers are organized in topical sections on security investments and planning, privacy and anonymity, adversarial and robust control, network security and botnets, authorization and authentication, as well as theory and algorithms for security