Effective Proactive and Reactive Defense Strategies against Malicious Attacks in a Virtualized Honeynet

Table 2

Decision variables.

Notation	Description
𝐷^⇀𝑖	A defense configuration, including resource allocation and defending strategies on 𝑖th service, where 𝑖∈𝑆
𝑇𝑖𝑗(𝐷^⇀𝑖,𝐴^⇀𝑖𝑗)	1 if the attacker achieves his goal successfully and 0 otherwise, where 𝑖∈𝑆, 1≤𝑗≤𝐹𝑖
𝑛𝑖	The proactive defense resource allocated to node 𝑖, where 𝑖∈𝑁
𝑙𝑖	The number of VMM level 𝑖 purchased, where 𝑖∈𝑀
𝛿𝑖	The number of services that honeypot 𝑖 can simulate, where 𝑖∈𝐻
𝜀𝑖	The interactive capability of false target honeypot 𝑖, where 𝑖∈𝑃
𝜃𝑖	The maximum throughput of fake traffic of honeypot 𝑖, where 𝑖∈𝑄
𝑉(𝑙𝑖)	The cost of VMM level 𝑖 with 𝑙𝑖 VMMs, where 𝑖∈𝑀
ℎ(𝛿𝑖,𝜀𝑖)	The cost of constructing a false target honeypot, where 𝑖∈𝑃
𝑓(𝛿𝑖,𝜃𝑖)	The cost of constructing a fake traffic generator honeypot, where 𝑖∈𝑄
𝑡(𝛿𝑖,𝜀𝑖,𝜃𝑖)	The cost of constructing a honeypot equipped with false target and fake traffic functions, where 𝑖∈𝑅
𝐵NL	The budget of constructing nodes and links
𝐵proactive	The budget of proactive defense resource
𝐵special	The budget of reactive defense resource
𝐵virtualized	The budget of virtualization
𝐵honeypot	The budget of honeypots
𝐵reconfig	The budget of reconfiguration functions
𝑒	The total number of intermediate nodes
𝑞𝑖𝑗	The capacity of direct link between nodes 𝑖 and 𝑗, where 𝑖∈𝑁, 𝑗∈𝑁
𝑔(𝑞𝑖𝑗)	The cost of constructing a link from node 𝑖 to node 𝑗 with capacity 𝑞𝑖𝑗, where 𝑖∈𝑁, 𝑗∈𝑁
𝑥𝑖	1 if node 𝑖 is equipped with false target function and 0 otherwise, where 𝑖∈𝑁
𝑦𝑖	1 if node 𝑖 is equipped with fake traffic generating function and 0 otherwise, where 𝑖∈𝑁
𝑧𝑖	1 if node 𝑖 is equipped with reconfiguration function and 0 otherwise, where 𝑖∈𝑁