A Game Theoretic Model for Strategic Defence Selection Against DDoS Attacks in IoT Networks

The rapid integration of the Internet of Things (IoT) into various systems, driven by advanced sensor networks, has dramatically improved real-time data monitoring and overall management across multiple industries. However, this integration also exposes IoT networks to various security vulnerabilities, mainly Distributed Denial of Service (DDoS) attacks, which can severely disrupt many services. Therefore, it is necessary to develop robust defence strategies for IoT networks. Traditional security measures often need to consider the strategic aspects of cybersecurity, where quick and precise decision-making is crucial. Given the adversarial nature of the interactions between attackers and defenders, selecting the most effective defence strategy to maximize benefits remains a challenge. To address this issue, this paper introduces the DDoS Defence Strategy Model (DDSM), which strategically uses game theory to select optimal defence mechanisms in IoT networks. The model dynamically adapts defence strategies based on the intensity and characteristics of the attack, optimizing the deployment of high-interaction and low-interaction honeypots and rate-limiting mechanisms. The DDSM model uses a gradient-based approach to achieve Nash equilibrium, adapting to evolving attack patterns to ensure efficient resource utilization and reduce operational overhead. The simulation results confirm the effectiveness of the model in selecting optimal defence strategies and maximizing defensive payoffs. The DDSM game model is designed to find the best combination of defences for IoT networks against high- and low-volume DDoS attacks, ensuring the continued availability of critical services.