Abstract:We are currently facing unprecedented cyber warfare with the rapid evolution of tactics, increasing asymmetry of intelligence, and the growing accessibility of hacking tools. In this landscape, cyber deception emerges as a critical component of our defense strategy against increasingly sophisticated attacks. This chapter aims to highlight the pivotal role of game-theoretic models and foundation models (FMs) in analyzing, designing, and implementing cyber deception tactics. Game models (GMs) serve as a foundational framework for modeling diverse adversarial interactions, allowing us to encapsulate both adversarial knowledge and domain-specific insights. Meanwhile, FMs serve as the building blocks for creating tailored machine learning models suited to given applications. By leveraging the synergy between GMs and FMs, we can advance proactive and automated cyber defense mechanisms by not only securing our networks against attacks but also enhancing their resilience against well-planned operations. This chapter discusses the games at the tactical, operational, and strategic levels of warfare, delves into the symbiotic relationship between these methodologies, and explores relevant applications where such a framework can make a substantial impact in cybersecurity. The chapter discusses the promising direction of the multi-agent neurosymbolic conjectural learning (MANSCOL), which allows the defender to predict adversarial behaviors, design adaptive defensive deception tactics, and synthesize knowledge for the operational level synthesis and adaptation. FMs serve as pivotal tools across various functions for MANSCOL, including reinforcement learning, knowledge assimilation, formation of conjectures, and contextual representation. This chapter concludes with a discussion of the challenges associated with FMs and their application in the domain of cybersecurity.

Game-Theoretic and Machine Learning-based Approaches for Defensive Deception: A Survey

A Game-theoretic Taxonomy and Survey of Defensive Deception for Cybersecurity and Privacy

Game Theory Approaches for Evaluating the Deception-based Moving Target Defense

Game of Travesty: Decoy-based Psychological Cyber Deception for Proactive Human Agents

Adversarial Reconnaissance Mitigation and Modeling

A Game-Theoretic Foundation of Deception: Knowledge Acquisition and Fundamental Limits

A Survey of Game Theoretic Approaches for Adversarial Machine Learning in Cybersecurity Tasks

Deception by Design: Evidence-Based Signaling Games for Network Defense

AI deception: A survey of examples, risks, and potential solutions

A Differentially Private Game Theoretic Approach for Deceiving Cyber Adversaries

Toward Personalized Deceptive Signaling for Cyber Defense Using Cognitive Models

Deception Maze: A Stackelberg Game-Theoretic Defense Mechanism for Intranet Threats

Towards a Cognitive Theory of Cyber Deception

Dynamic Bayesian Games for Adversarial and Defensive Cyber Deception

Symbiotic Game and Foundation Models for Cyber Deception Operations in Strategic Cyber Warfare

From Cyber-Security Deception To Manipulation and Gratification Through Gamification

Three Decades of Deception Techniques in Active Cyber Defense -- Retrospect and Outlook

Phishing for Phools in the Internet of Things: Modeling One-to-Many Deception using Poisson Signaling Games

A Survey of Network Requirements for Enabling Effective Cyber Deception

Honesty Is the Best Policy: Defining and Mitigating AI Deception

Cyber Deception: State of the art, Trends and Open challenges