{"id":"https://openalex.org/W4414432602","doi":"https://doi.org/10.1109/case58245.2025.11164058","title":"Game-Theoretic Defense Policy for Network Security Against Intelligent Adversary","display_name":"Game-Theoretic Defense Policy for Network Security Against Intelligent Adversary","publication_year":2025,"publication_date":"2025-08-17","ids":{"openalex":"https://openalex.org/W4414432602","doi":"https://doi.org/10.1109/case58245.2025.11164058"},"language":"en","primary_location":{"id":"doi:10.1109/case58245.2025.11164058","is_oa":false,"landing_page_url":"https://doi.org/10.1109/case58245.2025.11164058","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 21st International Conference on Automation Science and Engineering (CASE)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092818201","display_name":"Armita Kazeminajafabadi","orcid":"https://orcid.org/0009-0009-8174-8507"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Armita Kazeminajafabadi","raw_affiliation_strings":["Northeastern University,Department of Electrical and Computer Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northeastern University,Department of Electrical and Computer Engineering","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018464968","display_name":"Tian Lan","orcid":"https://orcid.org/0000-0003-3010-8090"},"institutions":[{"id":"https://openalex.org/I193531525","display_name":"George Washington University","ror":"https://ror.org/00y4zzh67","country_code":"US","type":"education","lineage":["https://openalex.org/I193531525"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tian Lan","raw_affiliation_strings":["George Washington University,Department of Electrical and Computer Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"George Washington University,Department of Electrical and Computer Engineering","institution_ids":["https://openalex.org/I193531525"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5017741575","display_name":"Mahdi Imani","orcid":"https://orcid.org/0000-0001-9570-9909"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mahdi Imani","raw_affiliation_strings":["Northeastern University,Department of Electrical and Computer Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northeastern University,Department of Electrical and Computer Engineering","institution_ids":["https://openalex.org/I12912129"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2628","last_page":"2635"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9358000159263611,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9358000159263611,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/observability","display_name":"Observability","score":0.6651999950408936},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6328999996185303},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5333999991416931},{"id":"https://openalex.org/keywords/markov-decision-process","display_name":"Markov decision process","score":0.5127999782562256},{"id":"https://openalex.org/keywords/nash-equilibrium","display_name":"Nash equilibrium","score":0.4903999865055084},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.46000000834465027},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4410000145435333},{"id":"https://openalex.org/keywords/markov-process","display_name":"Markov process","score":0.41269999742507935},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.3935999870300293}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6656000018119812},{"id":"https://openalex.org/C36299963","wikidata":"https://www.wikidata.org/wiki/Q1369844","display_name":"Observability","level":2,"score":0.6651999950408936},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6328999996185303},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5333999991416931},{"id":"https://openalex.org/C106189395","wikidata":"https://www.wikidata.org/wiki/Q176789","display_name":"Markov decision process","level":3,"score":0.5127999782562256},{"id":"https://openalex.org/C46814582","wikidata":"https://www.wikidata.org/wiki/Q23389","display_name":"Nash equilibrium","level":2,"score":0.4903999865055084},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47920000553131104},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.46000000834465027},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4410000145435333},{"id":"https://openalex.org/C159886148","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov process","level":2,"score":0.41269999742507935},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.3935999870300293},{"id":"https://openalex.org/C177142836","wikidata":"https://www.wikidata.org/wiki/Q44455","display_name":"Game theory","level":2,"score":0.37400001287460327},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.35670000314712524},{"id":"https://openalex.org/C185429906","wikidata":"https://www.wikidata.org/wiki/Q1130160","display_name":"Estimator","level":2,"score":0.33239999413490295},{"id":"https://openalex.org/C7606001","wikidata":"https://www.wikidata.org/wiki/Q4686702","display_name":"Adversary model","level":3,"score":0.32820001244544983},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.32440000772476196},{"id":"https://openalex.org/C200594392","wikidata":"https://www.wikidata.org/wiki/Q812529","display_name":"Bayesian game","level":4,"score":0.32030001282691956},{"id":"https://openalex.org/C90652560","wikidata":"https://www.wikidata.org/wiki/Q11091747","display_name":"Minimum mean square error","level":3,"score":0.31360000371932983},{"id":"https://openalex.org/C17098449","wikidata":"https://www.wikidata.org/wiki/Q176814","display_name":"Partially observable Markov decision process","level":4,"score":0.30809998512268066},{"id":"https://openalex.org/C32407928","wikidata":"https://www.wikidata.org/wiki/Q2733833","display_name":"Best response","level":3,"score":0.3061999976634979},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.3027999997138977},{"id":"https://openalex.org/C29122968","wikidata":"https://www.wikidata.org/wiki/Q1414816","display_name":"Incentive","level":2,"score":0.2833999991416931},{"id":"https://openalex.org/C98763669","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov chain","level":2,"score":0.263700008392334},{"id":"https://openalex.org/C177769412","wikidata":"https://www.wikidata.org/wiki/Q278090","display_name":"Prior probability","level":3,"score":0.26249998807907104},{"id":"https://openalex.org/C3309286","wikidata":"https://www.wikidata.org/wiki/Q4907693","display_name":"Bilevel optimization","level":3,"score":0.258899986743927},{"id":"https://openalex.org/C149728462","wikidata":"https://www.wikidata.org/wiki/Q751319","display_name":"Minimax","level":2,"score":0.2563999891281128},{"id":"https://openalex.org/C2780695315","wikidata":"https://www.wikidata.org/wiki/Q3799040","display_name":"Unobservable","level":2,"score":0.25529998540878296},{"id":"https://openalex.org/C13540734","wikidata":"https://www.wikidata.org/wiki/Q5318996","display_name":"Dynamic network analysis","level":2,"score":0.2502000033855438}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/case58245.2025.11164058","is_oa":false,"landing_page_url":"https://doi.org/10.1109/case58245.2025.11164058","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 21st International Conference on Automation Science and Engineering (CASE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W1968909445","https://openalex.org/W1984810795","https://openalex.org/W1990130467","https://openalex.org/W2062757535","https://openalex.org/W2077937403","https://openalex.org/W2131875370","https://openalex.org/W2524790524","https://openalex.org/W2529866846","https://openalex.org/W2765449849","https://openalex.org/W2801962073","https://openalex.org/W2892303285","https://openalex.org/W2919491917","https://openalex.org/W2942465044","https://openalex.org/W2971212413","https://openalex.org/W2971648973","https://openalex.org/W2981281446","https://openalex.org/W3016437435","https://openalex.org/W3043486047","https://openalex.org/W3099080616","https://openalex.org/W3135970545","https://openalex.org/W4213222909","https://openalex.org/W4293215635","https://openalex.org/W4383097042","https://openalex.org/W4384834203","https://openalex.org/W4385462766","https://openalex.org/W4386318712","https://openalex.org/W4391164360","https://openalex.org/W4395039471","https://openalex.org/W4399100951","https://openalex.org/W4399641533","https://openalex.org/W4402436945","https://openalex.org/W4405303508","https://openalex.org/W4407948467"],"related_works":[],"abstract_inverted_index":{"The":[0,54],"rapid":[1],"evolution":[2],"of":[3,58,84,91,115,148,185],"IT":[4],"infrastructure":[5],"and":[6,15,45,61,94,166],"networked":[7],"systems":[8],"has":[9,129],"increased":[10],"their":[11,27],"susceptibility":[12],"to":[13,79,97,132,157],"sophisticated":[14],"intelligent":[16,47],"cyber":[17],"threats.":[18],"Despite":[19],"advancements":[20],"in":[21,188],"attack":[22],"detection,":[23],"adversaries":[24],"continuously":[25],"refine":[26],"strategies,":[28],"exploiting":[29],"vulnerabilities":[30],"with":[31],"growing":[32],"complexity.":[33],"In":[34],"this":[35,109],"paper,":[36],"we":[37],"model":[38],"the":[39,59,81,112,120,123,130,139,144,149,159,183],"dynamic":[40],"interaction":[41],"between":[42],"a":[43,50,67,76],"defender":[44,121],"an":[46],"adversary":[48,60],"as":[49],"two-player":[51],"zero-sum":[52],"game.":[53],"defender\u2019s":[55],"partial":[56],"observability":[57],"network":[62,85,92,116,150,189],"state":[63],"is":[64],"represented":[65],"using":[66],"partially":[68],"observable":[69],"Markov":[70],"decision":[71],"process":[72],"(POMDP).":[73],"We":[74],"develop":[75],"recursive":[77,113],"method":[78],"compute":[80],"posterior":[82,110],"distribution":[83],"compromises":[86],"based":[87,142],"on":[88,143],"incomplete":[89],"observations":[90],"states":[93],"no":[95],"access":[96],"adversarial":[98],"actions.":[99],"An":[100],"optimal":[101,145],"minimum":[102],"mean":[103,163],"square":[104,164],"error":[105,165],"(MMSE)":[106],"estimator":[107],"leverages":[108],"for":[111],"estimation":[114],"compromises.":[117],"To":[118],"ensure":[119],"follows":[122],"Nash":[124,140],"equilibrium,":[125],"where":[126],"neither":[127],"player":[128],"incentive":[131],"deviate,":[133],"our":[134],"automated":[135,180],"defense":[136,174],"policy":[137,168],"employs":[138],"strategy":[141],"MMSE":[146],"estimate":[147],"state.":[151],"Two":[152],"evaluation":[153],"metrics":[154],"are":[155],"introduced":[156],"assess":[158],"policy\u2019s":[160],"effectiveness:":[161],"expected":[162,167],"misalignment.":[169],"Simulation":[170],"results":[171],"show":[172],"improved":[173],"effectiveness":[175],"over":[176],"static":[177],"or":[178],"non-strategic":[179],"policies,":[181],"demonstrating":[182],"advantages":[184],"strategic":[186],"decision-making":[187],"security.":[190]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}