Abstract:Tri-level defender-attacker game models are a well-studied method for determining how best to protect a system (e.g., a transportation network) from attacks. Existing models assume that defender and attacker actions have a perfect effect, i.e., system components hardened by a defender cannot be destroyed by the attacker, and attacked components always fail. Because of these assumptions, these models produce solutions in which defended components are never attacked, a result that may not be realistic in some contexts. This paper considers an imperfect defender-attacker problem in which defender decisions (e.g., hardening) and attacker decisions (e.g., interdiction) have an imperfect effect such that the probability distribution of a component's capacity depends on the amount of defense and attack resource allocated to the component. Thus, this problem is a stochastic optimization problem with decision-dependent probabilities and is challenging to solve because the deterministic equivalent formulation has many high-degree multilinear terms. To address the challenges in solving this problem, we propose a successive refinement algorithm that dynamically refines the support of the random variables as needed, leveraging the fact that a less-refined support has fewer scenarios and multilinear terms and is, therefore, easier to solve. A comparison of the successive refinement algorithm versus the deterministic equivalent formulation on a tri-level stochastic maximum flow problem indicates that the proposed method solves many more problem instances and is up to $66$ times faster. These results indicate that it is now possible to solve tri-level problems with imperfect hardening and attacks.

A Successive Refinement Algorithm for Tri-Level Stochastic Defender-Attacker Problems with Decision-Dependent Probability Distributions

Think That Attackers Think: Using First-Order Theory of Mind in Intrusion Response System.

A Successive Refinement for Solving Stochastic Programs with Decision-Dependent Random Capacities

Optimal Network Defense Strategy Selection Method: A Stochastic Differential Game Model

Optimal Defense Resource Allocation Considering Nonlinear Attack Cost in Power Systems

A Bi-Level Stochastic Model with Averse Risk and Hidden Information for Cyber-Network Interdiction

A Risk-Averse Tri-Level Stochastic Model for Locating and Recovering Facilities Against Attacks in an Uncertain Environment

Adaptive Decision-Making in Attack-Defense Games with Bayesian Inference of Rationality Level

Spatial-Temporal Moving Target Defense: A Markov Stackelberg Game Model

Network Security Defense Decision-Making Method Based on Stochastic Game and Deep Reinforcement Learning

Data-driven Defense Strategies for an Infrastructure Network against Multiple Interdictions

A Stochastic Game Theoretic Approach to Attack Prediction and Optimal Active Defense Strategy Decision

Network defense decision-making based on deep reinforcement learning and dynamic game theory

Dynamic Defender-Attacker Blotto Game

Defender Policy Evaluation and Resource Allocation Using MITRE ATT&CK Evaluations Data

Sequential Attacker–Defender Game on Complex Networks Considering the Cascading Failure Process

Learning Near-Optimal Intrusion Responses Against Dynamic Attackers

Defence and Attack of Systems with Variable Attacker System Structure Detection Probability

Attacker-defender game from a network science perspective.

Optimal network protection against diverse interdictor strategies

Receding Horizon Defense Strategy for Reach-Avoid Games with Uncertainties Via Pairwise Outcomes