Deception Robust Control for automated cyber defense resource allocation

We propose a Deception Robust Control (DRC) for orchestrating the cyber sensors and cyber effectors present in typical enterprise information network systems operating in the ever changing situations that arise in servicing their missions. The theory and exemplar of deception control of focus here-though motivated by conventional warfare-applies to any partial information asymmetric stochastic game, including cyb er defense. We first motivate the need for automated deception reasoning in cyber defense, then provide a brief outline of the elements of a generic Deception Robust Controller (DRC), leading to the discussion on the challenges in adapting the centralized DRC to inherently distributed problems arising in cyber defense, and finally discuss our attempts to meet those challenges successfully.