Work

The Illusion of Optimal Defense: Static Interdiction Under Adaptive and Persistent Attackers

Year: 2026

Type: conference-paper

Abstract: As cyber threats evolve into sophisticated multi-stage campaigns, organizations increasingly rely on optimized yet static defense strategies to protect their networks. However, these static interdiction models often underestimate the capabilities of intelligent adversaries who learn and adapt to defensive barriers. This paper proposes an adaptive attacker model based on reinforcement learning to evaluate the robustness of static defense strategies derived from the Critical Node Problem (CNP). Unlike conventional simulations that assume predictable attack patterns, our agent leverages Q-learning to dynamically discover bypass trajectories while adhering to realistic operational constraints such as local persistence and entry commitment. We evaluate this adaptive agent against defense sets optimized via integer linear programming across various budget constraints. Experimental results demonstrate that the adaptive attacker agent consistently outperforms stochastic baselines by identifying efficient detour paths, revealing a significant security gap in static defense evaluations. Our findings underscore the need for dynamic defense mechanisms that account for the evolving intelligence of modern cyber threats.

Source: Proceedings of the AAAI Symposium Series

DOI: 10.1609/aaaiss.v9i1.42948

Authors: Jeongkeun Shin, Siyuan Zhai, L. Richard Carley, Kathleen M. Carley

Institution: Carnegie Mellon University

Language: English

Topic: Information and Cyber Security

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: diamond

Funders: Carnegie Mellon University, Office of Naval Research

Award: G8876996369