Sep 2026· Proceedings of the Thirty-Fifth International Joint Conference on Artificial Intelligence· 0 citations· 30 references
TL;DR
A polynomial-time approximation scheme for SSG with mixed quantal response attackers, where the follower population consists of multiple discrete attacker types, each following a type-specific QR model, is developed based on an exponential cone programming formulation combined with a carefully designed Branch-and-Bound procedure.
Abstract
The quantal response (QR) model is widely used in Stackelberg security games (SSGs) to capture boundedly rational adversaries. Existing work on SSGs under QR, however, almost exclusively assumes a homogeneous attacker population, ignoring heterogeneity in attacker preferences and rationality. We study SSG with mixed quantal response attackers, where the follower population consists of multiple discrete attacker types, each following a type-specific QR model. The defender allocates limited resources across targets, while an attacker drawn from this heterogeneous population observes the defender’s strategy and attacks a single target. This results in a highly non-convex equilibrium computation problem. We develop a polynomial-time approximation scheme (PTAS) for this setting when the number of attacker types is bounded, based on an exponential cone programming formulation combined with a carefully designed Branch-and-Bound procedure. Experiments demonstrate that our approach outperforms standard gradient-based methods and that explicitly modeling attacker heterogeneity yields significant gains over traditional SSG models with a single QR attacker.
An empirical evaluation in a cybersecurity case study with two networks and real vulnerabilities drawn from CVE and scored using the Common Vulnerability Scoring System shows that QSE beats Stackelberg in realized defender utility spanning 144 scenarios with specification errors and 25 parameter configurations.
Asif Rahman, Md Abu Sayed, Ahmed Ann Noor Ryen et al.· 0 citations
An extended security game is formulated in which an attacker may select multiple targets and derive an exact mixed-integer linear programming oracle under a optimistic tie-breaking rule to study no-regret online learning in Repeated Stackelberg Security Games with time-varying attack intensities.
Guan-Da Chen, Shi-Heng Zhang, Yue Wang et al.· 0 citations
Dueling bandit algorithms excel in learning from pairwise comparisons, offering robust performance guarantees in benign environments. However, recent evidence suggests that even state-of-the-art methods can be highly susceptible to adversarial manipulation. In this work, we introduce and analyze a post-action attack mo...
Mo Lyu, Chen-Ye Yang, Guan-Lin Liu et al.· IEEE Transactions on Signal...· 0 citations
It is demonstrated that under certain initial conditions, the Attackers can mislead the Defender into making suboptimal decisions through a slow-speed deception strategy, achieving superior payoffs compared to the complete information game.
Xiang-Kai Wu, Shaolin Tan, Wei Wang et al.· 0 citations
Interconnected systems can suffer infectious attacks, where the compromise of one node exposes neighboring nodes and may trigger cascading loss. Existing Stackelberg and network-defense models usually address only part of this setting: a centralized defender, independent targets, or no post-attack resource transfer. Th...
Lei Cui, Yifan Li, Shuhan Qi et al.· Journal of King Saud Univers...· 0 citations
Hardware Trojans are malicious circuit modifications that can be covertly inserted during the design or fabrication of integrated circuits, enabling leakage, performance degradation, or mission failure after deployment. Because exhaustive testing against all Trojan classes and activation behaviors are prohibitively exp...
Soraya Partow, Satyaki Nan· 2026 International Conferenc...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.