Abstract:Intrusion detection,as an active measure to assure information security,has been receiving intensive attention and has recently become the focus of the computer security especially the network security research communities.In order to avoid being detected,however,intrusion events have evolved to become intelligent and distributive,making them good at concealing their purposes and so penetrating the intrusion detection system.To deal with this problem,as this paper does,techniques involving artificial intelligence and machine learning are brought in.This paper models intrusion and its detection as two multi-agent systems that have conflict interests,and holds the opinion that to intrude is just to device and execut attacking plans aiming to achieve certain objectives,the key of intrusion detection then is to analyze the observed opopnent's actions perceived as abnormal and reveal their intentions,which is then a classical intention recognition problem.Be is justifiable,we noticed that the traditional KEY-HOLE observing method for intention recognition is not suitable to be used here,because the environment for intrusion detection usually has an attack-defense nature thus is dynamic and can be extremely complex,making it expectable that failures to report intrusions and false reports of intrusions do happen,as a result acquiring a complete and true action sequence of the intruder is impossible.Under this circumstance,to design a strategy so robust that can recognize the intruder's intention using just an action sequence which not only contains only part of the intruder's complete action squence and also unknownly includs some misclassified actions is desperated needed,and this is exactly what this paper may contribute.Further than proposing the two multi-agent systems model,this paper sees the intrusion process as a Partially Observable Markov Decision Process(POMDP),and then estimates the intruder's intention as the output of the process.In this cae intention of the intruder can be recognized through an incomplete and defective action sequence it has just taken.The effectiveness of the proposed method is proved by experiments on data set contributed by DARPA.

Opponent's intention recognition and countermeasure based on behaviors

Quadratic Estimate of Opponent's Intentions in Multi-Robot Systems Based on Current Behavior

Think That Attackers Think: Using First-Order Theory of Mind in Intrusion Response System.

Human-robot Negotiation of Intentions Based on Virtual Fixtures for Shared Task Execution

A Plan Recognition Approach for Agent in Adversarial Multi-Agent System

P-CMOMMT Algorithm For The Cooperative Multi-Robot Observation of Multiple Moving Targets

Dynamic coalition: A cooperation model of multi-robot systems based on intention identification

Multiple Targets Observation Algorithm of Multi-Robot System Based on Altruism

Ancillary Mechanism for Autonomous Decision-Making Process in Asymmetric Confrontation: a View from Gomoku

Model-Based Opponent Modeling

Modeling and Control Architecture for the Competitive Networked Robot System Based on POMDP

Opponent portrait for multiagent reinforcement learning in competitive environment

Research on cyber attack intention recognition based on partially observable Markov decision process

Proactive Intention Recognition for Joint Human-Robot Search and Rescue Missions through Monte-Carlo Planning in POMDP Environments

Resilient and Adaptive Replanning for Multi-Robot Target Tracking with Sensing and Communication Danger Zones

Proactive Robot Control for Collaborative Manipulation Using Human Intent

Research on Cobot Action Decision-Making Method Based on Intuitionistic Fuzzy Set and Game Theory

Autonomous UAV maneuvering decisions by refining opponent strategies

Opponent Modeling in Deep Reinforcement Learning

Self-Reflective Risk-Aware Artificial Cognitive Modeling for Robot Response to Human Behaviors

Inner Attention Supported Adaptive Cooperation for Heterogeneous Multi Robots Teaming based on Multi-agent Reinforcement Learning