Game Theoretical Method for Anomaly-Based Intrusion Detection

<div>Payoff of the attacker <svg height="11.8174pt" id="M362" style="vertical-align:-3.1815pt" version="1.1" viewbox="-0.0498162 -8.6359 15.7304 11.8174" width="15.7304pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M715 650H476L470 622C550 619 562 610 562 570C562 536 553 481 535 384L523 321C485 121 408 37 283 37C178 37 99 109 134 297L178 532C193 612 199 616 278 622L284 650H29L23 622C105 616 109 609 94 532L48 291C23 160 51 83 98 40C143 -1 202 -16 260 -16C321 -16 387 3 439 49C509 111 542 204 563 312L577 384C595 479 608 533 619 569C629 603 637 620 709 622L715 650Z"></path></g><g transform="matrix(.0091,0,0,-0.0091,8.606,3.132)"><path d="M722 32C646 41 636 48 622 116L544 496L509 667L472 658L153 123C106 45 93 42 27 32L18 0H259L268 32C178 40 172 48 204 107L272 233H509C523 180 533 137 540 96C548 50 546 39 466 32L457 0H714L722 32ZM502 283H299L448 547H450L502 283Z"></path></g></svg> with respect to <svg height="9.14241pt" id="M363" style="vertical-align:-3.1815pt" version="1.1" viewbox="-0.0498162 -5.96091 9.23472 9.14241" width="9.23472pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M383 397C383 424 344 448 299 448C244 448 172 409 132 375C66 319 23 227 23 146C23 42 74 -12 146 -12C208 -12 298 30 359 103L343 124C315 95 248 48 192 48C145 48 111 85 111 163C111 228 129 294 151 330C171 363 201 401 241 401C275 401 302 384 325 356C332 347 339 344 348 348C373 360 383 381 383 397Z"></path></g><g transform="matrix(.0091,0,0,-0.0091,4.173,3.132)"><path d="M389 0V32C297 38 291 46 291 118V635C234 613 175 595 109 583V556L161 554C203 552 207 547 207 497V118C207 46 201 38 110 32V0H389Z"></path></g></svg> if <svg height="9.14241pt" id="M364" style="vertical-align:-3.1815pt" version="1.1" viewbox="-0.0498162 -5.96091 9.23472 9.14241" width="9.23472pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M383 397C383 424 344 448 299 448C244 448 172 409 132 375C66 319 23 227 23 146C23 42 74 -12 146 -12C208 -12 298 30 359 103L343 124C315 95 248 48 192 48C145 48 111 85 111 163C111 228 129 294 151 330C171 363 201 401 241 401C275 401 302 384 325 356C332 347 339 344 348 348C373 360 383 381 383 397Z"></path></g><g transform="matrix(.0091,0,0,-0.0091,4.173,3.132)"><path d="M414 144C384 79 371 75 317 75H135L276 221C367 316 408 376 408 465C408 570 327 635 237 635C179 635 131 609 100 575L42 494L67 471C94 510 138 565 205 565C277 565 321 517 321 435C321 348 258 270 195 195C146 137 88 81 33 26V0H411C423 44 433 88 446 135L414 144Z"></path></g></svg> is fixed as <span class="nowrap"><svg height="11.5303pt" id="M365" style="vertical-align:-3.18148pt" version="1.1" viewbox="-0.0498162 -8.34882 39.6599 11.5303" width="39.6599pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M383 397C383 424 344 448 299 448C244 448 172 409 132 375C66 319 23 227 23 146C23 42 74 -12 146 -12C208 -12 298 30 359 103L343 124C315 95 248 48 192 48C145 48 111 85 111 163C111 228 129 294 151 330C171 363 201 401 241 401C275 401 302 384 325 356C332 347 339 344 348 348C373 360 383 381 383 397Z"></path></g><g transform="matrix(.0091,0,0,-0.0091,4.173,3.132)"><path d="M414 144C384 79 371 75 317 75H135L276 221C367 316 408 376 408 465C408 570 327 635 237 635C179 635 131 609 100 575L42 494L67 471C94 510 138 565 205 565C277 565 321 517 321 435C321 348 258 270 195 195C146 137 88 81 33 26V0H411C423 44 433 88 446 135L414 144Z"></path></g><g transform="matrix(.013,0,0,-0.013,12.751,0)"><path d="M535 323V373H52V323H535ZM535 138V188H52V138H535Z"></path></g><g transform="matrix(.013,0,0,-0.013,24.014,0)"><path d="M241 635C89 635 35 457 35 312C35 153 89 -12 240 -12C390 -12 443 166 443 312C443 466 390 635 241 635ZM238 602C329 602 354 454 354 312C354 172 330 22 240 22C152 22 124 173 124 313S148 602 238 602Z"></path></g><g transform="matrix(.013,0,0,-0.013,30.254,0)"><path d="M113 -12C146 -12 170 11 170 46C170 78 146 103 114 103S58 78 58 46C58 11 82 -12 113 -12Z"></path></g><g transform="matrix(.013,0,0,-0.013,33.218,0)"><path d="M412 140C382 77 369 73 315 73H129L270 222C362 320 402 379 402 466C402 571 322 635 234 635C177 635 130 609 99 576L42 495L64 475C90 514 133 568 201 568C274 568 318 519 318 435C318 349 255 267 193 193C144 135 87 78 32 23V0H405C417 45 427 89 440 131L412 140Z"></path></g></svg>.</span></div>

Security and Communication Networks

Game Theoretical Method for Anomaly-Based Intrusion Detection

Figure 1