Game Theoretical Method for Anomaly-Based Intrusion Detection

<div>Payoff of the defender <svg height="11.8174pt" id="M396" style="vertical-align:-3.1815pt" version="1.1" viewbox="-0.0498162 -8.6359 16.2967 11.8174" width="16.2967pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M715 650H476L470 622C550 619 562 610 562 570C562 536 553 481 535 384L523 321C485 121 408 37 283 37C178 37 99 109 134 297L178 532C193 612 199 616 278 622L284 650H29L23 622C105 616 109 609 94 532L48 291C23 160 51 83 98 40C143 -1 202 -16 260 -16C321 -16 387 3 439 49C509 111 542 204 563 312L577 384C595 479 608 533 619 569C629 603 637 620 709 622L715 650Z"></path></g><g transform="matrix(.0091,0,0,-0.0091,8.606,3.132)"><path d="M786 370C786 572 637 650 431 650H137L130 618C217 606 220 603 204 519L129 127C115 48 107 39 26 30L18 0H270C410 0 516 20 609 75C722 140 786 240 786 370ZM683 373C683 178 547 40 323 40C298 40 264 40 241 45C213 51 207 64 220 127L295 545C304 582 309 595 320 601C335 610 367 613 406 613C570 613 683 538 683 373Z"></path></g></svg> with respect to <svg height="9.14241pt" id="M397" style="vertical-align:-3.1815pt" version="1.1" viewbox="-0.0498162 -5.96091 9.23472 9.14241" width="9.23472pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M383 397C383 424 344 448 299 448C244 448 172 409 132 375C66 319 23 227 23 146C23 42 74 -12 146 -12C208 -12 298 30 359 103L343 124C315 95 248 48 192 48C145 48 111 85 111 163C111 228 129 294 151 330C171 363 201 401 241 401C275 401 302 384 325 356C332 347 339 344 348 348C373 360 383 381 383 397Z"></path></g><g transform="matrix(.0091,0,0,-0.0091,4.173,3.132)"><path d="M414 144C384 79 371 75 317 75H135L276 221C367 316 408 376 408 465C408 570 327 635 237 635C179 635 131 609 100 575L42 494L67 471C94 510 138 565 205 565C277 565 321 517 321 435C321 348 258 270 195 195C146 137 88 81 33 26V0H411C423 44 433 88 446 135L414 144Z"></path></g></svg> if <svg height="9.14241pt" id="M398" style="vertical-align:-3.1815pt" version="1.1" viewbox="-0.0498162 -5.96091 9.23472 9.14241" width="9.23472pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M383 397C383 424 344 448 299 448C244 448 172 409 132 375C66 319 23 227 23 146C23 42 74 -12 146 -12C208 -12 298 30 359 103L343 124C315 95 248 48 192 48C145 48 111 85 111 163C111 228 129 294 151 330C171 363 201 401 241 401C275 401 302 384 325 356C332 347 339 344 348 348C373 360 383 381 383 397Z"></path></g><g transform="matrix(.0091,0,0,-0.0091,4.173,3.132)"><path d="M389 0V32C297 38 291 46 291 118V635C234 613 175 595 109 583V556L161 554C203 552 207 547 207 497V118C207 46 201 38 110 32V0H389Z"></path></g></svg> is fixed as <span class="nowrap"><svg height="11.5303pt" id="M399" style="vertical-align:-3.18148pt" version="1.1" viewbox="-0.0498162 -8.34882 39.6599 11.5303" width="39.6599pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M383 397C383 424 344 448 299 448C244 448 172 409 132 375C66 319 23 227 23 146C23 42 74 -12 146 -12C208 -12 298 30 359 103L343 124C315 95 248 48 192 48C145 48 111 85 111 163C111 228 129 294 151 330C171 363 201 401 241 401C275 401 302 384 325 356C332 347 339 344 348 348C373 360 383 381 383 397Z"></path></g><g transform="matrix(.0091,0,0,-0.0091,4.173,3.132)"><path d="M389 0V32C297 38 291 46 291 118V635C234 613 175 595 109 583V556L161 554C203 552 207 547 207 497V118C207 46 201 38 110 32V0H389Z"></path></g><g transform="matrix(.013,0,0,-0.013,12.751,0)"><path d="M535 323V373H52V323H535ZM535 138V188H52V138H535Z"></path></g><g transform="matrix(.013,0,0,-0.013,24.014,0)"><path d="M241 635C89 635 35 457 35 312C35 153 89 -12 240 -12C390 -12 443 166 443 312C443 466 390 635 241 635ZM238 602C329 602 354 454 354 312C354 172 330 22 240 22C152 22 124 173 124 313S148 602 238 602Z"></path></g><g transform="matrix(.013,0,0,-0.013,30.254,0)"><path d="M113 -12C146 -12 170 11 170 46C170 78 146 103 114 103S58 78 58 46C58 11 82 -12 113 -12Z"></path></g><g transform="matrix(.013,0,0,-0.013,33.218,0)"><path d="M384 0V27C293 34 287 42 287 114V635C232 613 172 594 109 583V559L157 557C201 555 205 550 205 499V114C205 42 199 34 109 27V0H384Z"></path></g></svg>.</span></div>

Security and Communication Networks

Game Theoretical Method for Anomaly-Based Intrusion Detection

Figure 2