Abstract The last few years have witnessed a rapid increase in the number of cyber-attacks on governments and organizations. To combat these attacks, a number of works have developed mathematical models that attempt to capture the behavior of attackers. However, these works focus on the process of the attack rather than the behavior of the attacker, which hinders the effectiveness of these models. On the other hand, many applications in cyber security have utilized game theory to model both the defender and attacker. This paper combines the Markov Chain models with game theory in order to assess the security state of Domain Name System (DNS) servers. This assessment was performed using realistic values of reward and cost in the game model. The simulation results indicate that the proposed modifications to the model have improved the accuracy of modeling the behavior of attackers on DNS servers.

中文翻译：

---

域名系统攻击者行为的博弈论建模

摘要 过去几年，针对政府和组织的网络攻击数量迅速增加。为了对抗这些攻击，许多工作已经开发出试图捕捉攻击者行为的数学模型。然而，这些工作侧重于攻击的过程而不是攻击者的行为，这阻碍了这些模型的有效性。另一方面，网络安全领域的许多应用都利用博弈论对防御者和攻击者进行建模。本文将马尔可夫链模型与博弈论相结合，以评估域名系统 (DNS) 服务器的安全状态。该评估是使用游戏模型中的实际奖励和成本值进行的。