arXiv:2510.05157cs.LGcs.AI2025-10被引 1

用对抗强化学习模拟攻防博弈,揭示防御策略的制胜关键。

Adversarial Reinforcement Learning for Offensive and Defensive Agents in a Simulated Zero-Sum Network Environment

  • 构建真实网络环境,让攻防智能体在零和奖励下对弈。
  • 5万+训练回合中防御方始终占优,自适应封锁效果显著。
  • 适合研究网络安全智能体、攻防协同演化与迁移学习。

本文通过自定义的OpenAI Gym环境,开展对抗强化学习在网络安全中的受控研究,模拟多端口服务上的暴力破解攻击与响应式防御。环境包含背景流量噪声、渐进式漏洞利用、基于IP的逃避策略、蜜罐陷阱及多层级限速防御等现实安全权衡。攻击者与防御者代理采用深度Q网络(DQN)在零和奖励框架中训练,成功渗透获得大额终局奖励,而微小动作则有小幅代价。在多种配置下系统评估(包括陷阱检测概率、漏洞利用难度阈值及训练方案变化),结果表明:防御方可观测性与陷阱有效性构成重大攻击障碍;奖励塑造与精细训练调度对学习稳定性至关重要。在超过5万次训练回合中,防御方持续保持战略优势,尤其在引入自适应IP封锁与端口级控制等复杂策略时性能提升更明显。完整实现细节、可复现超参数配置与架构指南均已公开,支持未来在网络安全对抗强化学习领域的研究。零和设定与真实操作约束使该环境适用于自主防御系统、攻防共演化及真实场景迁移学习研究。

原文摘要 · Abstract (English)

This paper presents a controlled study of adversarial reinforcement learning in network security through a custom OpenAI Gym environment that models brute-force attacks and reactive defenses on multi-port services. The environment captures realistic security trade-offs including background traffic noise, progressive exploitation mechanics, IP-based evasion tactics, honeypot traps, and multi-level rate-limiting defenses. Competing attacker and defender agents are trained using Deep Q-Networks (DQN) within a zero-sum reward framework, where successful exploits yield large terminal rewards while incremental actions incur small costs. Through systematic evaluation across multiple configurations (varying trap detection probabilities, exploitation difficulty thresholds, and training regimens), the results demonstrate that defender observability and trap effectiveness create substantial barriers to successful attacks. The experiments reveal that reward shaping and careful training scheduling are critical for learning stability in this adversarial setting. The defender consistently maintains strategic advantage across 50,000+ training episodes, with performance gains amplifying when exposed to complex defensive strategies including adaptive IP blocking and port-specific controls. Complete implementation details, reproducible hyperparameter configurations, and architectural guidelines are provided to support future research in adversarial RL for cybersecurity. The zero-sum formulation and realistic operational constraints make this environment suitable for studying autonomous defense systems, attacker-defender co-evolution, and transfer learning to real-world network security scenarios.

强化学习攻防博弈网络安全对抗训练

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。