Game Theory is a wide ranging subject with practical applications that we are beginning to apply to information security. Many are familiar with the Prisoner’s Dilemma, but there are many other games that also illustrate strategic advantage. In this presentation, two games will be discussed in the context of infosec and identifying practical strategic applications– Col Blotto and FlipIt. Col Blotto games use a militaristic example of identifying where to put troops on a battlefield to best defend a territory. FlipIt games cover what to do when you have incomplete information, including situations in which you don’t see your opponent’s moves. This presentation aims to use these games demonstrate a dynamic methodology in network hardening as well as a plan in an assumed compromise scenario
Vanessa Redman has been fully immersed in the Cybersecurity industry for the last 4 years, but has been playing with computers since getting a Commodore VIC-20 in the late 1980s. Vanessa has also worked for a certified Red Team, and as such, is always playing the devil’s advocate, looking for assumptions to disprove. She is currently studying Algorithmic Game Theory for use in Cyber Threat Intelligence and Attack Detection.