Inducement Game Model of Data-Stealing Trojan Based on Stochastic Game Nets
To achieve the long-term goal of information theft,data-stealing Trojans typically employ the trigger execution strategy,providing high concealment and uncertainty in the execution of their malicious actions.The mainstream defense model against data-stealing Trojans adopts a passive defense strategy that involves monitoring and detecting the behavior of these Trojans,but is prone to omissions and delayed detection.To improve the defense effectiveness,this paper introduced the concept of inducement operation to construct an inducement-based defense strategy targeting data-stealing Trojans.Using stochastic game nets,this paper modeled and analyzed the confrontation process between the data-stealing Trojans and defenders,resulting in the development of the Inducement Game Model of Data-Stealing Trojan(IGMDT-SGN).IGMDT-SGN provides a clear illustration of the strategic logic and temporal dynamics of employing the inducement defense strategy against these Trojans.Quantitative analysis conducted through model calculations shows that the inducement defense strategy,as presented in IGMDT-SGN,outperforms the passive defense strategy in terms of defense success rate and average defense time.This finding provides useful guidance for defending against data-stealing Trojans.
data-stealing Trojangame modelinducement operationstochastic game nets
NETL
NSTL
万方数据
