Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Optimal Cybersecurity Investments in Large Networks Using SIS Model: Algorithm Design

Published

Author(s)

Van Sy Mai, Richard La, Abdella Battou

Abstract

We study the problem of minimizing the (time) average security costs in large systems comprising many interdependent subsystems, where the state evolution is captured by a susceptible-infected-susceptible (SIS) model. The security costs reflect security investments, economic losses and recovery costs from infections and failures following successful attacks. We show that the resulting optimization problem is nonconvex and propose a suite of algorithms -- two based on a convex relaxation, and the other two for finding a local minimizer, based on a reduced gradient method and sequential convex programming. Also, we provide a sufficient condition under which the convex relaxations are exact and, hence, their solution coincides with that of the original problem. Numerical results are provided to validate our analytical results and to demonstrate the effectiveness of the proposed algorithms.
Citation
IEEE/ACM Transactions on Networking

Keywords

Cybersecurity investments, Optimization, SIS model

Citation

Mai, V. , La, R. and Battou, A. (2021), Optimal Cybersecurity Investments in Large Networks Using SIS Model: Algorithm Design, IEEE/ACM Transactions on Networking, [online], https://doi.org/10.1109/TNET.2021.3091856, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=931351 (Accessed November 21, 2024)

Issues

If you have any questions about this publication or are having problems accessing it, please contact reflib@nist.gov.

Created July 1, 2021, Updated February 23, 2022