用多智能体模拟攻防对抗，评估防御策略有效性
Towards a Multi-Agent Simulation of Cyber-attackers and Cyber-defenders Battles
- 构建马尔可夫模型模拟攻防双方在节点上的动态交互
- 通过真实场景还原攻防行为，量化目标达成距离
- 适合网络安全研究者与防御系统设计人员参考
随着网络攻击日益复杂且协同化，采用多智能体方法的防御策略可能成为应对攻击的关键。本文提出一种基于马尔可夫模型的仿真框架，用于模拟部署在网络节点上的攻击者与防御者智能体之间的对抗过程。通过抽象网络节点为包含智能体属性的集合，定义其在不同状态下的行动规则，反映网络响应机制及属性变化。各智能体的集体决策推动整个环境向攻击或防御目标更近或更远。利用该仿真器，我们实现了多个基于现实启发的攻防行为策略组合，验证了不同组织模式下防御系统的动态表现。
原文摘要 · Abstract (English)
As cyber-attacks show to be more and more complex and coordinated, cyber-defenders strategy through multi-agent approaches could be key to tackle against cyber-attacks as close as entry points in a networked system. This paper presents a Markovian modeling and implementation through a simulator of fighting cyber-attacker agents and cyber-defender agents deployed on host network nodes. It aims to provide an experimental framework to implement realistically based coordinated cyber-attack scenarios while assessing cyber-defenders dynamic organizations. We abstracted network nodes by sets of properties including agents' ones. Actions applied by agents model how the network reacts depending in a given state and what properties are to change. Collective choice of the actions brings the whole environment closer or farther from respective cyber-attackers and cyber-defenders goals. Using the simulator, we implemented a realistically inspired scenario with several behavior implementation approaches for cyber-defenders and cyber-attackers.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品；中文卡片由大模型生成，请以原文为准。