{"id":"https://openalex.org/W4319342004","doi":"https://doi.org/10.1109/tnsm.2023.3240366","title":"Resisting Multiple Advanced Persistent Threats via Hypergame-Theoretic Defensive Deception","display_name":"Resisting Multiple Advanced Persistent Threats via Hypergame-Theoretic Defensive Deception","publication_year":2023,"publication_date":"2023-02-07","ids":{"openalex":"https://openalex.org/W4319342004","doi":"https://doi.org/10.1109/tnsm.2023.3240366"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2023.3240366","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tnsm.2023.3240366","pdf_url":"https://ieeexplore.ieee.org/ielx7/4275028/5699970/10040491.pdf","source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://ieeexplore.ieee.org/ielx7/4275028/5699970/10040491.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006178191","display_name":"Zelin Wan","orcid":"https://orcid.org/0000-0001-5293-0363"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Zelin Wan","raw_affiliation_strings":["Department of Computer Science, Virginia Tech, Falls Church, VA, USA"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Virginia Tech, Falls Church, VA, USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011649304","display_name":"Jin-Hee Cho","orcid":"https://orcid.org/0000-0002-5908-4662"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jin-Hee Cho","raw_affiliation_strings":["Department of Computer Science, Virginia Tech, Falls Church, VA, USA"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Virginia Tech, Falls Church, VA, USA","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077937501","display_name":"Mu Zhu","orcid":"https://orcid.org/0000-0003-4303-4318"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mu Zhu","raw_affiliation_strings":["Department of Computer Science, North Carolina State University, Raleigh, NC, USA"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109171008","display_name":"Ahmed H. Anwar","orcid":null},"institutions":[{"id":"https://openalex.org/I166416128","display_name":"DEVCOM Army Research Laboratory","ror":"https://ror.org/011hc8f90","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I166416128","https://openalex.org/I2802705668","https://openalex.org/I4210154437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ahmed H. Anwar","raw_affiliation_strings":["U.S. Army Research Laboratory, Adelphi, MD, USA"],"affiliations":[{"raw_affiliation_string":"U.S. Army Research Laboratory, Adelphi, MD, USA","institution_ids":["https://openalex.org/I166416128"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090126029","display_name":"Charles Kamhoua","orcid":"https://orcid.org/0000-0003-2169-5975"},"institutions":[{"id":"https://openalex.org/I166416128","display_name":"DEVCOM Army Research Laboratory","ror":"https://ror.org/011hc8f90","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I166416128","https://openalex.org/I2802705668","https://openalex.org/I4210154437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Charles A. Kamhoua","raw_affiliation_strings":["U.S. Army Research Laboratory, Adelphi, MD, USA"],"affiliations":[{"raw_affiliation_string":"U.S. Army Research Laboratory, Adelphi, MD, USA","institution_ids":["https://openalex.org/I166416128"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5020679327","display_name":"Munindar P. Singh","orcid":"https://orcid.org/0000-0003-3599-3893"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Munindar P. Singh","raw_affiliation_strings":["Department of Computer Science, North Carolina State University, Raleigh, NC, USA"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5006178191"],"corresponding_institution_ids":["https://openalex.org/I859038795"],"apc_list":null,"apc_paid":null,"fwci":5.436,"has_fulltext":true,"cited_by_count":12,"citation_normalized_percentile":{"value":0.95769633,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"20","issue":"3","first_page":"3816","last_page":"3830"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9919999837875366,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/deception","display_name":"Deception","score":0.9075785875320435},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8053544163703918},{"id":"https://openalex.org/keywords/game-theory","display_name":"Game theory","score":0.7541830539703369},{"id":"https://openalex.org/keywords/nash-equilibrium","display_name":"Nash equilibrium","score":0.7382045388221741},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.5731066465377808},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5638008713722229},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5633467435836792},{"id":"https://openalex.org/keywords/repeated-game","display_name":"Repeated game","score":0.46417805552482605},{"id":"https://openalex.org/keywords/perception","display_name":"Perception","score":0.4613378942012787},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4029945135116577},{"id":"https://openalex.org/keywords/mathematical-economics","display_name":"Mathematical economics","score":0.20448598265647888},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.09652984142303467},{"id":"https://openalex.org/keywords/social-psychology","display_name":"Social psychology","score":0.08184212446212769}],"concepts":[{"id":"https://openalex.org/C2779267917","wikidata":"https://www.wikidata.org/wiki/Q170028","display_name":"Deception","level":2,"score":0.9075785875320435},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8053544163703918},{"id":"https://openalex.org/C177142836","wikidata":"https://www.wikidata.org/wiki/Q44455","display_name":"Game theory","level":2,"score":0.7541830539703369},{"id":"https://openalex.org/C46814582","wikidata":"https://www.wikidata.org/wiki/Q23389","display_name":"Nash equilibrium","level":2,"score":0.7382045388221741},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.5731066465377808},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5638008713722229},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5633467435836792},{"id":"https://openalex.org/C202556891","wikidata":"https://www.wikidata.org/wiki/Q1584646","display_name":"Repeated game","level":3,"score":0.46417805552482605},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.4613378942012787},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4029945135116577},{"id":"https://openalex.org/C144237770","wikidata":"https://www.wikidata.org/wiki/Q747534","display_name":"Mathematical economics","level":1,"score":0.20448598265647888},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.09652984142303467},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.08184212446212769},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C169760540","wikidata":"https://www.wikidata.org/wiki/Q207011","display_name":"Neuroscience","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2023.3240366","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tnsm.2023.3240366","pdf_url":"https://ieeexplore.ieee.org/ielx7/4275028/5699970/10040491.pdf","source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tnsm.2023.3240366","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tnsm.2023.3240366","pdf_url":"https://ieeexplore.ieee.org/ielx7/4275028/5699970/10040491.pdf","source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.4099999964237213}],"awards":[{"id":"https://openalex.org/G1551612066","display_name":null,"funder_award_id":"W911NF-17-1-0","funder_id":"https://openalex.org/F4320338295","funder_display_name":"Army Research Laboratory"},{"id":"https://openalex.org/G1995643085","display_name":null,"funder_award_id":"W911NF-19-2-0150","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G2608336305","display_name":null,"funder_award_id":"W911NF-20-2","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G3973661662","display_name":null,"funder_award_id":"W911NF-17-1-0370","funder_id":"https://openalex.org/F4320338295","funder_display_name":"Army Research Laboratory"},{"id":"https://openalex.org/G5259331294","display_name":null,"funder_award_id":"W911NF","funder_id":"https://openalex.org/F4320338295","funder_display_name":"Army Research Laboratory"},{"id":"https://openalex.org/G56008422","display_name":null,"funder_award_id":"W911NF-19","funder_id":"https://openalex.org/F4320338295","funder_display_name":"Army Research Laboratory"},{"id":"https://openalex.org/G6432118919","display_name":null,"funder_award_id":"W911NF-17-1-0370","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G7259598866","display_name":null,"funder_award_id":"W911NF-19-2-0150","funder_id":"https://openalex.org/F4320338295","funder_display_name":"Army Research Laboratory"},{"id":"https://openalex.org/G7452299184","display_name":null,"funder_award_id":"W911NF","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G8415477955","display_name":null,"funder_award_id":"W911NF-19","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G8863805959","display_name":null,"funder_award_id":"W911NF-20-2-0140","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G8998121839","display_name":null,"funder_award_id":"911NF","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"}],"funders":[{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"},{"id":"https://openalex.org/F4320338295","display_name":"Army Research Laboratory","ror":"https://ror.org/011hc8f90"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4319342004.pdf","grobid_xml":"https://content.openalex.org/works/W4319342004.grobid-xml"},"referenced_works_count":61,"referenced_works":["https://openalex.org/W145844368","https://openalex.org/W151350171","https://openalex.org/W243614003","https://openalex.org/W1109422923","https://openalex.org/W1487596546","https://openalex.org/W1506923107","https://openalex.org/W1517229197","https://openalex.org/W1541509122","https://openalex.org/W1594031697","https://openalex.org/W1973788147","https://openalex.org/W1979660838","https://openalex.org/W1991567646","https://openalex.org/W2003343104","https://openalex.org/W2004208486","https://openalex.org/W2040340473","https://openalex.org/W2084752903","https://openalex.org/W2099161251","https://openalex.org/W2109300365","https://openalex.org/W2126311411","https://openalex.org/W2136584409","https://openalex.org/W2153245338","https://openalex.org/W2171707538","https://openalex.org/W2181625086","https://openalex.org/W2291308025","https://openalex.org/W2293239441","https://openalex.org/W2476275724","https://openalex.org/W2529393085","https://openalex.org/W2532522660","https://openalex.org/W2566566135","https://openalex.org/W2568394246","https://openalex.org/W2586432806","https://openalex.org/W2771380743","https://openalex.org/W2780533491","https://openalex.org/W2789266794","https://openalex.org/W2800456250","https://openalex.org/W2884410905","https://openalex.org/W2906763758","https://openalex.org/W2907277971","https://openalex.org/W2933915278","https://openalex.org/W2951174687","https://openalex.org/W2963405846","https://openalex.org/W2970822576","https://openalex.org/W2971648973","https://openalex.org/W2981338682","https://openalex.org/W3106255564","https://openalex.org/W3143219376","https://openalex.org/W3144954252","https://openalex.org/W3151604502","https://openalex.org/W3187985969","https://openalex.org/W3189604664","https://openalex.org/W3190734472","https://openalex.org/W3203693215","https://openalex.org/W4244221631","https://openalex.org/W6629000054","https://openalex.org/W6630268518","https://openalex.org/W6684635062","https://openalex.org/W6685475308","https://openalex.org/W6696591131","https://openalex.org/W6746721039","https://openalex.org/W6753800401","https://openalex.org/W6824062597"],"related_works":["https://openalex.org/W2963993697","https://openalex.org/W2918424341","https://openalex.org/W4312141693","https://openalex.org/W2103821767","https://openalex.org/W1969185016","https://openalex.org/W1536009559","https://openalex.org/W2111030377","https://openalex.org/W2037619003","https://openalex.org/W2904794353","https://openalex.org/W3125137934"],"abstract_inverted_index":{"Existing":[0],"defensive":[1],"deception":[2],"(DD)":[3],"approaches":[4],"apply":[5],"game":[6,18,34,45,69],"theory,":[7],"assuming":[8],"that":[9],"an":[10,52,90,95],"attacker":[11],"and":[12,62,128,143,154,161,165,177,182],"defender":[13,65],"play":[14,66],"the":[15,33,119,122,133,141,157,170,179],"same,":[16],"full":[17],"with":[19,70],"all":[20],"possible":[21],"strategies.":[22],"However,":[23],"in":[24,43,148],"deceptive":[25],"settings,":[26],"players":[27],"may":[28],"have":[29],"different":[30,71],"beliefs":[31],"about":[32],"itself.":[35],"Such":[36],"structural":[37],"uncertainty":[38],"is":[39],"not":[40],"naturally":[41],"handled":[42],"traditional":[44],"theory.":[46],"In":[47],"this":[48],"work,":[49],"we":[50],"formulate":[51],"attackdefense":[53],"hypergame":[54,74,100,142],"where":[55],"multiple":[56],"advanced":[57],"persistent":[58],"threat":[59],"(APT)":[60],"attackers":[61],"a":[63,67],"single":[64],"repeated":[68],"perceptions.":[72],"The":[73],"model":[75],"systematically":[76],"evaluates":[77],"how":[78],"various":[79],"DD":[80,134],"strategies":[81,135],"can":[82],"defend":[83],"proactively":[84],"against":[85],"APT":[86],"attacks.":[87],"We":[88,113,131,167],"present":[89],"adaptive":[91,111],"method":[92],"to":[93,117],"select":[94],"optimal":[96],"defense":[97,104],"strategy":[98],"using":[99],"theory":[101],"for":[102,110],"strategic":[103],"as":[105,107],"well":[106],"machine":[108,144],"learning":[109,145],"defense.":[112],"conducted":[114],"in-depth":[115],"experiments":[116],"analyze":[118,169],"performance":[120],"of":[121,150,156,174],"eight":[123],"schemes":[124],"including":[125],"ours,":[126],"baselines,":[127],"existing":[129],"counterparts.":[130],"found":[132],"showed":[136],"their":[137],"highest":[138],"advantages":[139],"when":[140],"are":[146],"considered":[147],"terms":[149],"reduced":[151],"false":[152],"positives":[153],"negatives":[155],"NIDS,":[158],"system":[159],"lifetime,":[160],"players\u2019":[162],"perceived":[163],"uncertainties":[164],"utilities.":[166],"also":[168],"Hyper":[171],"Nash":[172],"Equilibrium":[173],"given":[175],"hypergames":[176],"discuss":[178],"key":[180],"findings":[181],"insights":[183],"behind":[184],"them.":[185]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}