Abstract:We focus on adversarial patrolling games on arbitrary graphs, where the Defender can control a mobile resource, the targets are alarmed by an alarm system, and the Attacker can observe the actions of the mobile resource of the Defender and perform different attacks exploiting multiple resources. This scenario can be modeled as a zero-sum extensive-form game in which each player can play multiple times. The game tree is exponentially large both in the size of the graph and in the number of attacking resources. We show that when the number of the Attacker's resources is free, the problem of computing the equilibrium path is NP-hard, while when the number of resources is fixed, the equilibrium path can be computed in poly-time. We provide a dynamic-programming algorithm that, given the number of the Attacker's resources, computes the equilibrium path requiring poly-time in the size of the graph and exponential time in the number of the resources. Furthermore, since in real-world scenarios it is implausible that the Defender knows the number of attacking resources, we study the robustness of the Defender's strategy when she makes a wrong guess about that number. We show that even the error of just a single resource can lead to an arbitrary inefficiency, when the inefficiency is defined as the ratio of the Defender's utilities obtained with a wrong guess and a correct guess. However, a more suitable definition of inefficiency is given by the difference of the Defender's utilities: this way, we observe that the higher the error in the estimation, the higher the loss for the Defender. Then, we investigate the performance of online algorithms when no information about the Attacker's resources is available. Finally, we resort to randomized online algorithms showing that we can obtain a competitive factor that is twice better than the one that can be achieved by any deterministic online algorithm.

A Game Theoretic Analysis of Additive Adversarial Attacks and Defenses

Attack As Defense: Characterizing Adversarial Examples Using Robustness.

Game Theoretic Mixed Experts for Combinational Adversarial Machine Learning

A Game Theoretic Perspective on Adversarial Machine Learning and Related Cybersecurity Applications

Adversarial Markov Games: On Adaptive Decision-Based Attacks and Defenses

Adversarial Example Games

Additive Security Games: Structure and Optimization

Randomized Prediction Games for Adversarial Machine Learning

Achieve Optimal Adversarial Accuracy for Adversarial Deep Learning using Stackelberg Game

A Game Model for Adversarial Classification in Spam Filtering

Towards Optimal Randomized Strategies in Adversarial Example Game.

Learning to Defend by Attacking (and Vice-Versa): Transfer of Learning in Cybersecurity Games

Adversarial Learning in Statistical Classification: A Comprehensive Review of Defenses Against Attacks

Nash Equilibria and Pitfalls of Adversarial Training in Adversarial Robustness Games

The Space of Adversarial Strategies

A Game-Theoretical Approach for Finding Optimal Strategies in an Intruder Classification Game

Game-theoretic Understanding of Adversarially Learned Features.

Theoretical Analysis of Adversarial Learning: A Minimax Approach

Adversarial Attacks Neutralization via Data Set Randomization

Facing Multiple Attacks in Adversarial Patrolling Games with Alarmed Targets

A Survey of Game Theoretic Approaches for Adversarial Machine Learning in Cybersecurity Tasks