Game theory approach in decision-making to invest in modules

Document Type : Original Article

Authors

Department of Computer Engineering, Faculty of Electrical and Computer Engineering, Kashan University, Kashan, Iran

10.22052/scj.2024.246500.1075

Abstract

Cloud computing involves a variety of technologies, including networking and virtualization, to meet the new needs of users, but is vulnerable to many security threats. To provide the necessary level of security in cloud computing, decision-making on the type and number of security modules used by cloud service users and then paying the relevant fees is of particular importance. Game theory, with the ability to model the behaviour of users and attackers of a supervisor and analyze the possible strategy and profitability of each, can suggest a suitable strategy for investing in the security modules of a virtual machine. In our previous work, we used game theory to analyze the decision to invest in one of the security modules for each of the actors. The purpose of this article is to study the effect of the three parameters "different investment costs", "probability of success of the attack on the user" and "probability of success of the attack on the supervisor" and to make an appropriate decision in this situation. Based on the simulation results, it can be said that given the different values of the probability of a successful attack on a supervisor, a predetermined investment can lead to a proper Nash equilibrium. In general, at low costs or in the case of increasing the cost of investing in security, the user tends to constantly change his strategy and provide the desired security conditions.

Keywords

Main Subjects



Articles in Press, Accepted Manuscript
Available Online from 22 September 2023
  • Receive Date: 26 June 2022
  • Revise Date: 04 September 2023
  • Accept Date: 22 September 2023