Cover: Cyber Deterrence with Imperfect Attribution and Unverifiable Signaling

Cyber Deterrence with Imperfect Attribution and Unverifiable Signaling

Published in: European Journal of Operational Research (2022) doi: 10.1016/j.ejor.2022.07.021

Posted on Jul 25, 2022

by Jonathan W. Welburn, Justin Grana, Karen Schwindt

Motivated by the asymmetric information inherent to cyberwarfare, we examine a game of deterrence between an attacker and a defender in which the defender can signal its retaliatory capability but can only imperfectly attribute an attack. We show that there are equilibria in which the defender sends noisy signals to increase its expected payoff. In some equilibria, the defender can use signaling to deter an attacker and increase its payoff. In a different and somewhat counter-intuitive equilibrium, the defender can increase its expected payoff through signaling by luring the attacker to attack more.

This report is part of the RAND external publication series. Many RAND studies are published in peer-reviewed scholarly journals, as chapters in commercial books, or as documents published by other organizations.

RAND is a nonprofit institution that helps improve policy and decisionmaking through research and analysis. RAND's publications do not necessarily reflect the opinions of its research clients and sponsors.