Optimising the Release Order of Defensive Mechanisms

  1. Lookup NU author(s)
  2. Suliman Alsuhibany
  3. Ahmad Alonaizi
  4. Christopher Smith
  5. Professor Aad van Moorsel
Author(s)Alsuhibany S A, Alonaizi A, Smith C, van Moorsel A
Publication type Report
Series TitleSchool of Computing Science Technical Report Series
Year2012
DateMay 2012
Report Number1333
Pages14
Full text is available for this publication:
In the practical use of security mechanisms such as CAPTCHAs and spam filters, attackers and defenders exchange 'blows', each celebrating (temporary) success in breaking and defending. We are interested in the question of whether the order in which defensive algorithms are released has a significant impact on the time taken by attackers to break the combined set of algorithms. The rationale behind our approach is that attackers learn from their attempts, and that the release schedule of defensive mechanisms can be adjusted so as to impair that learning experience. This paper introduces this problem. We show that our hypothesis holds for an experiment using several simplified but representative spam filter algorithms—that is, the order in which spam filters are released has a statistically significant impact on the time attackers take to break all algorithms. We then model the problem as an optimization problem using a Markov Decision Process model. We present a tailored optimization algorithm to obtain efficiently the optimal release strategies for any given model.
InstitutionNewcastle University
Place PublishedNewcastle upon Tyne
ActionsLink to this publication