Electronic and Cyber Defense

Electronic and Cyber Defense

Application of Game Theory for Optimal Strategy Selection in Cyber Attacks and Defense

Document Type : Original Article

Author
Mohammad Saeid Alamdari
PhD in Mathematics and Head of the Mathematics Department, Supreme National Defense University, Tehran, Iran.
Abstract
In today’s world, the expansion of cyberspace and growing societal dependence on information systems have turned cyber threats into a serious challenge for national security. This paper presents a mathematical model based on game theory to analyze and simulate optimal strategies in cyber attacks and defenses. First, game theory is introduced as an analytical tool in cyberspace, and its significance in determining the best strategies for both attackers and defenders is examined. Next, a mathematical model is defined in which both parties aim to maximize their own payoff while minimizing damages caused by attacks through the selection of various strategies. Subsequently, several cyber scenarios—including DDoS attacks, phishing, and sophisticated malware—are investigated via MATLAB simulations, and the impact of varying levels of attack and defense is analyzed. The results demonstrate that optimal defensive strategies can significantly reduce the success rate of cyber attacks and enhance cybersecurity. Finally, the proposed model serves as an effective tool to assist cybersecurity policymakers in developing efficient strategies to counter cyber threats.
Keywords
Game theory
Cyber defense
Cyber attack
Cyber security
Simulation
Subjects

Smiley face

 

   [1]      H. Eren, M. T. Gençoğlu, and S. Yenal, Strateji ve Güvenlik Alanında Temel ve Güncel Yaklaşımlar: Siber Savaş. Nobel Yayınları, 2020.
   [2]      A. Sokri, "Game theory and cyber defense," in Games in Management Science, pp. 335-352, Springer, 2019.
   [3]      M. S. Alamdari, M. Fatemi, and M. Shahrezaei, "Introducing an efficient method to identify the noise pattern of helicopters based on the area feature vector and weighted sparse representation classification," Electronic and Cyber Defense, vol. 12, no. 1, pp. 33-42, 2024, https://dorl.net/dor/20.1001.1.23224347.1403.12.1.4.2. (In Persian).
   [4]      M. S. Alamdari and M. Fatemi, "Applying weighted smoothed norm in sparse representation classification for face recognition," Electronic and Cyber Defense, vol. 11, no. 3, pp. 57-65, 2023, https://dorl.net/dor/20.1001.1.23224347.1402.11.3.6.1 (In Persian).
   [5]      M. Babaei, M. Motedayen, and M. Rezaee, "Semi-Blind Separation of Multiple Synchronous Wideband Frequency Hopping Signals Using a Band-Limited Receiver and Space-Time-Frequency Distributions," Electronic and Cyber Defense, vol. 11, no. 4, pp. 117-131, 2024, https://dorl.net/dor/20. 1001.1.23224347.1402. 11.4.10.7  (In Persian).
   [6]      A. Shojaeifard, H. Yazdani, and R. Nasiri, "Modular human face recognition method based on principal component analysis and Mahalanobis distance," Electronic and Cyber Defense, vol. 11, no. 4, pp. 93-98, 2024, https://dorl.net/dor/20.1001.1.23224347. 1402.11.4.8.5. (in Persian).
   [7]      C. T. Do, N. H. Tran, C. Hong, C. A. Kamhoua, K. A. Kwiat, E. Blasch, S. Ren, N. Pissinou, and S. S. Iyengar, "Game theory for cybersecurity and privacy," ACM Computing Surveys (CSUR), vol. 50, no. 2, p. 30, 2017.
   [8]      K. G. Guseinov, E. Akyar, and S. A. Düzce, Oyun Teorisi, Seçkin Yayınları, 2010.
   [9]      C. Kiekintveld, V. Lisy, and R. Pibil, "Game-theoretic foundations for the strategic use of honeypots in network security," in Cyber Warfare, pp. 81-101, Springer, 2015.
[10]      M. J. Osborne, An Introduction to Game Theory, Oxford University Press, 2004.
[11]      S. G. Sanjay and H. Yuan, "Cyber war games: Strategic jostling among traditional adversaries," Cyber Warfare, Advances in Information Security, vol. 56, 2015.
[12]      J. Harsanyi, "Games with incomplete information played by Bayesian players, I-III, Part I, the basic model," Management Science, vol. 14, no. 3, pp. 159–182, 1967.
[13]      R. Aumann and M. Maschler, Repeated Games with Incomplete Information, MIT Press, 1995.
[14]      S. N. Hamilton, W. L. Miller, A. Ott, and O. S. Saydjari, "The role of game theory in information warfare," in 4th Information Survivability Workshop, Vancouver, Canada, 2002.
[15]      J. Burke, "Robustness of optimal equilibrium among overlapping generations," Economic Theory, vol. 14, pp. 311–330, 1999.
[16]      R. Gibbons, Game Theory for Applied Economists, Princeton University Press, 1992.
[17]      M. Libicki, Defending Cyberspace, and Other Metaphors, National Defense University, 1997.
[18]      F. Andrew, P. Emmanouil, M. Pasquale, H. Chris, and S. Fabrizio, "Game theory meets information security management," in IFIP International Information Security Conference SEC 2014: ICT Systems Security and Privacy Protection, pp. 15-29, 2014.

  • Receive Date 01 January 2026
  • Revise Date 15 February 2026
  • Accept Date 22 February 2026
  • Publish Date 09 April 2026