Game‐theoretic computing in risk analysis
Abstract
Risk analysis, comprising risk assessment and risk management stages, is one of the most popular and challenging topics of our times because security and privacy, and availability and usability culminating at the trustworthiness of cybersystems and cyber information is at stake. The precautionary need derives from the existence of defenders versus adversaries, in an everlasting Darwinian scenario dating back to early human history of warriors fighting for their sustenance to survive. Fast forwarding to today's information warfare, whether in networks or healthcare or national security, the currently dire situation necessitates more than a hand calculator to optimize (maximize gains or minimize losses) risk due to prevailing scarce economic resources. This article reviews the previous works completed on this specialized topic of game‐theoretic computing, its methods and applications toward the purpose of quantitative risk assessment and cost‐optimal management in many diverse disciplines including entire range of informatics‐related topics. Additionally, this review considers certain game‐theoretic topics in depth historically, and those computationally resourceful such as Neumann's two‐way zero‐sum pure equilibrium and optimal mixed strategy solutions versus Nash equilibria with pure and mixed strategies. Computational examples are provided to highlight the significance of game‐theoretic solutions used in risk assessment and management, particularly in reference to cybersystems and information security.WIREs Comput Stat 2012, 4:227–248. doi: 10.1002/wics.1205 This article is categorized under:Algorithms and Computational Methods > Linear Programming Algorithms and Computational Methods > Networks and Security
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Game-theoretic computing is used for quantitative risk assessment in different fields, including information security.
“Indeed, game-theoretic computing is used for quantitative risk assessment in different fields, including information security [22].”
From IoT cyber risk: A holistic analysis of cyber risk assessment frameworks, risk vectors, and risk ranking process (2020) · cites this paper as [22]
Cites
Theory of games and economic behavior
Garcia, S. R., & Miller, S. J. (2019) · American Mathematical Society eBooks · doi:10.1090/mbk/121/32 · Cited by 16,777 · see citing works
Equilibrium points in <i>n</i> -person games
Nash, J. F. (1950) · Proceedings of the National Academy of Sciences · doi:10.1073/pnas.36.1.48 · Cited by 7,560 · see citing works
(1994) · Cited by 5,513 · see citing works
Theory of Games and Economic Behavior
Hawkins, D. (1945) · Philosophy of Science · doi:10.1086/286866 · Cited by 3,970 · see citing works
Reexamination of the perfectness concept for equilibrium points in extensive games
Selten, R. (1975) · International Journal of Game Theory · doi:10.1007/bf01766400 · Cited by 3,388 · see citing works
Games with Incomplete Information Played by “Bayesian” Players, I–III Part I. The Basic Model
Harsanyi, J. C. (1967) · Management Science · doi:10.1287/mnsc.14.3.159 · Cited by 2,170 · see citing works
Games with Incomplete Information Played by “Bayesian” Players, I–III: Part I. The Basic Model
Harsanyi, J. C. (2004) · Management Science · doi:10.1287/mnsc.1040.0270 · Cited by 2,161 · see citing works
An Introduction to Game Theory
(2013) · Sage eBooks · doi:10.4135/9781452275567.n5 · Cited by 1,495 · see citing works
Game theory meets network security and privacy
Manshaei, M. H., Zhu, Q., Alpcan, T., Bacşar, T., & Hubaux, J. (2013) · ACM Computing Surveys · doi:10.1145/2480741.2480742 · Cited by 818 · see citing works
An introduction to management science: Quantitative approaches to decision making
(1995) · Long Range Planning · doi:10.1016/0024-6301(95)92123-0 · Cited by 560 · see citing works
SIGNALLING IN A MODEL OF MONETARY POLICY WITH INCOMPLETE INFORMATION *
Vickers, J. (1986) · Oxford Economic Papers · doi:10.1093/oxfordjournals.oep.a041751 · Cited by 555 · see citing works
Zhang, S., & Zhang, Y. (2003) · 中国科学通报：英文版 · doi:10.1007/bf03325660 · Cited by 506 · see citing works
A Survey of Game Theory as Applied to Network Security
Roy, S., Ellis, C., Shiva, S. G., Dasgupta, D., Shandilya, V., & Wu, Q. (2010) · Hawaii International Conference on System Sciences (HICSS) · doi:10.1109/hicss.2010.35 · Cited by 498 · see citing works
Game strategies in network security
Lye, K.-W., & Wing, J. M. (2005) · International Journal of Information Security · doi:10.1007/s10207-004-0060-x · Cited by 445 · see citing works
A model for evaluating IT security investments
Cavusoglu, H., Mishra, B. K., & Raghunathan, S. (2004) · Communications of the ACM · doi:10.1145/1005817.1005828 · Cited by 361 · see citing works
Computing Optimal Randomized Resource Allocations for Massive Security Games
Kiekintveld, C. D., Jain, M., Tsai, J., et al. (2011) · Cambridge University Press eBooks · doi:10.1017/cbo9780511973031.008 · Cited by 357 · see citing works
Game Theory: A Nontechnical Introduction
Davis, M. D. (1970) · CERN Document Server (European Organization for Nuclear Research) · Cited by 281 · see citing works
Subjective Probability and the Theory of Games
Kadane, J., & Larkey, P. D. (1982) · Management Science · doi:10.1287/mnsc.28.2.113 · Cited by 272 · see citing works
Two-Person Game Theory: The Essential Ideas.
Lieberman, B., & Rapoport, A. (1967) · American Sociological Review · doi:10.2307/2091730 · Cited by 233 · see citing works
Binmore, K. (2007) · Oxford University Press eBooks · doi:10.1093/actrade/9780199218462.001.0001 · Cited by 193 · see citing works
Insua, D. R., Ríos, J., & Banks, D. L. (2009) · Journal of the American Statistical Association · doi:10.1198/jasa.2009.0155 · Cited by 187 · see citing works
Banks, D., Ríos, J., & Insua, D. R. (2015) · Chapman & Hall/CRC eBooks · doi:10.1201/b18653 · Cited by 172 · see citing works
Linear programming and theory of games
Gupta, P. K. (1979) · Medical Entomology and Zoology · Cited by 165 · see citing works
AVOIDIT: A Cyber Attack Taxonomy
Simmons, C., Ellis, C. D., Shiva, S. G., Dasgupta, D., & Wu, Q. (2009) · Cited by 124 · see citing works
Game Theory: Mathematical Models of Conflict
DeGroot, M. H., & Jones, A. J. (1981) · Technometrics · doi:10.2307/1268050 · Cited by 108 · see citing works
Rational Expectations in Games
Aumann, R. J., & Dréze, J. (2008) · American Economic Review · doi:10.1257/aer.98.1.72 · Cited by 104 · see citing works
Francis Ysidro Edgeworth, Statistician
Stigler, S. M. (1978) · Journal of the Royal Statistical Society Series A (General) · doi:10.2307/2344804 · Cited by 94 · see citing works
Game theory for cyber security
Shiva, S. G., Roy, S., & Dasgupta, D. (2010) · doi:10.1145/1852666.1852704 · Cited by 90 · see citing works
Security Meter: A Practical Decision-Tree Model to Quantify Risk
Şahinoglu, M. (2005) · IEEE Security & Privacy · doi:10.1109/msp.2005.81 · Cited by 90 · see citing works
On modeling and simulation of game theory-based defense mechanisms against DoS and DDoS attacks
Wu, Q., Shiva, S. G., Roy, S., et al. (2010) · Spring Simulation Multiconference · doi:10.1145/1878537.1878703 · Cited by 68 · see citing works
Decision Analysis: The Right Tool for Auctions
Rothkopf, M. H. (2007) · Decision Analysis · doi:10.1287/deca.1070.0097 · Cited by 63 · see citing works
Game-Theoretic Risk Analysis in Decision-Theoretic Rough Sets
Herbert, J. P., & Yao, J. (2008) · Springer eBooks · doi:10.1007/978-3-540-79721-0_22 · Cited by 58 · see citing works
The Role of Game Theory in Information Warfare
Hamilton, S. N., & Miller, W. L. (2002) · Cited by 54 · see citing works
Verification, Validation, and Evaluation in Information Security Risk Management
Fenz, S., & Ekelhart, A. (2010) · IEEE Security & Privacy · doi:10.1109/msp.2010.117 · Cited by 52 · see citing works
Game theory-based defense mechanisms against DDoS attacks on TCP/TCP-friendly flows
Bedi, H. S., Roy, S., & Shiva, S. G. (2011) · doi:10.1109/cicybs.2011.5949407 · Cited by 51 · see citing works
Risk assessment in practice: A real case study
Benini, M., & Sicari, S. (2008) · Computer Communications · doi:10.1016/j.comcom.2008.07.001 · Cited by 50 · see citing works
A Game Theoretical Attack-Defense Model Oriented to Network Security Risk Assessment
He, W., Xia, C., Wang, H., et al. (2008) · doi:10.1109/csse.2008.1651 · Cited by 44 · see citing works
A Game Theoretical Attack-Defense Model Oriented to Network Security Risk Assessment
He, W., Xia, C., Wang, H., et al. (2008) · doi:10.1109/csse.2008.1062 · Cited by 43 · see citing works
Game Theory Based Network Security
Luo, Y., Szidarovszky, F., Al-Nashif, Y. B., et al. (2010) · Journal of Information Security · doi:10.4236/jis.2010.11005 · Cited by 42 · see citing works
Challenges in Applying Game Theory to the Domain of Information Warfare
Hamilton, S. N., & Miller, W. L. (2001) · Cited by 40 · see citing works
Guetzkow, H. S. (1977) · American Political Science Review · doi:10.2307/1960143 · Cited by 35 · see citing works
Network routing for insurgency: An adversarial risk analysis framework
Wang, S., & Banks, D. (2011) · Naval Research Logistics (NRL) · doi:10.1002/nav.20469 · Cited by 32 · see citing works
Şahinoglu, M. (2006) · Wiley eBooks · doi:10.1002/9780470127872 · Cited by 29 · see citing works
Şahinoglu, M. (2008) · IEEE Transactions on Instrumentation and Measurement · doi:10.1109/tim.2007.915139 · Cited by 25 · see citing works
Games for Society, Business and War: Towards a Theory of Gaming
Colclough, M., & Shubik, M. (1976) · Operational Research Quarterly (1970-1977) · doi:10.2307/3009058 · Cited by 25 · see citing works
A Network Security Risk Assessment Framework Based on Game Theory
He, W. L., Xia, C., Zhang, C., et al. (2008) · International Conference on Future Generation Communication and Networking · doi:10.1109/fgcn.2008.166 · Cited by 21 · see citing works
Of Threats and Costs: A Game-Theoretic Approach to Security Risk Management
Maillé, P., Reichl, P., & Tuffin, B. (2010) · Springer optimization and its applications · doi:10.1007/978-1-4419-0534-5_2 · Cited by 14 · see citing works
Game Theory: Mathematical Models of Conflict
DeGroot, M. H. (1981) · Technometrics · doi:10.1080/00401706.1981.10486277 · Cited by 13 · see citing works
A Holistic Game Inspired Defense Architecture
Shiva, S. G., Bedi, H. S., Simmons, C. B., et al. (2012) · Lecture notes in electrical engineering · doi:10.1007/978-3-642-28798-5_63 · Cited by 9 · see citing works
Proceedings of the 3rd international conference on Rough sets and knowledge technology
Wang, G., Li, T., Grzymala‐Busse, J. W., et al. (2008) · Cited by 8 · see citing works
Statistical and Applied Mathematical Sciences Institute (SAMSI)
Berger, J. O. (2005) · Encyclopedia of Statistical Sciences · doi:10.1002/0471667196.ess6057 · Cited by 3 · see citing works
Nonfunctional Requirements Validation Using Nash Equilibria
Gregoriades, A., & Papadopoulou, V. G. (2010) · Sciyo eBooks · doi:10.5772/9952 · Cited by 2 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Kandasamy, K., Srinivas, S., Achuthan, K., & Rangan, V. P. (2020) · EURASIP Journal on Information Security · doi:10.1186/s13635-020-00111-0 · Cited by 160 · see citing works
- Authors
- Sahinoglu, M., Cueva‐Parra, L., & Ang, D.
- Affiliations
- Auburn University at Montgomery (US)
- ORCID
- Ang, David
- Venue
- WIREs Computational Statistics
- Publisher
- Wiley
- Published
- 2012-03-15
- Volume
- 4
- Issue
- 3
- Pages
- 227-248
- ISSN
- 1939-0068 (ISSN-L)
- 1939-5108
- OpenAlex
- W1976615099
- Cited by
- 9
- References
- 52
- Citations by year
- 2023: 1 · 2021: 1 · 2020: 1 · 2016: 2 · 2014: 1 · 2013: 2 · 2012: 1
- FWCI
- 3.47
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- Wiley Interdisciplinary Reviews Computational Statistics (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Social Sciences › Decision Sciences › Management Science and Operations Research › Game Theory and Applications
- Physical Sciences › Computer Science › Computer Networks and Communications › Cybersecurity and Information Systems
- Keywords
- risk analysis, risk assessment, risk management, information security, cyber systems, Nash equilibrium, mixed strategies, zero-sum games, information warfare
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
