Automated Security Response through Online Learning with Adaptive Conjectures

arXiv:2402.12499v1 Announce Type: cross
Abstract: We study automated security response for an IT infrastructure and formulate the interaction between an attacker and a defender as a partially observed, non-stationary game. We relax the standard assumption that the game model is correctly specified and consider that each player has a probabilistic conjecture about the model, which may be misspecified in the sense that the true model has probability 0. This formulation allows us to capture uncertainty about the infrastructure and the …

arxiv attacker automated cs.ai cs.cr cs.gt cs.lg cs.sy defender eess.sy game infrastructure it infrastructure non online learning player response security standard study