Security under Uncertainty : Adaptive Attackers Are More Challenging to Human Defenders than Random Attackers - HAL-SHS - Sciences de l'Homme et de la Société Accéder directement au contenu
Article Dans Une Revue Frontiers in Psychology Année : 2017

Security under Uncertainty : Adaptive Attackers Are More Challenging to Human Defenders than Random Attackers

Cleotilde Gonzalez
  • Fonction : Auteur

Résumé

Game Theory is a common approach used to understand attacker and defender motives, strategies, and allocation of limited security resources. For example, many defense algorithms are based on game-theoretic solutions that conclude that randomization of defense actions assures unpredictability, creating difficulties for a human attacker. However, many game-theoretic solutions often rely on idealized assumptions of decision making that underplay the role of human cognition and information uncertainty. The consequence is that we know little about how effective these algorithms are against human players. Using a simplified security game, we study the type of attack strategy and the uncertainty about an attacker's strategy in a laboratory experiment where participants play the role of defenders against a simulated attacker. Our goal is to compare a human defender's behavior in three levels of uncertainty (Information Level: Certain, Risky, Uncertain) and three types of attacker's strategy (Attacker's strategy: Minimax, Random, Adaptive) in a between-subjects experimental design. Best defense performance is achieved when defenders play against a minimax and a random attack strategy compared to an adaptive strategy. Furthermore, when payoffs are certain, defenders are as efficient against random attack strategy as they are against an adaptive strategy, but when payoffs are uncertain, defenders have most difficulties defending against an adaptive attacker compared to a random attacker. We conclude that given conditions of uncertainty in many security problems, defense algorithms would be more efficient if they are adaptive to the attacker actions, taking advantage of the attacker's human inefficiencies.
Fichier principal
Vignette du fichier
543895-FP_Moisan_201706.pdf (1.83 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03188217 , version 1 (01-04-2021)

Identifiants

  • HAL Id : hal-03188217 , version 1

Citer

Frederic Moisan, Cleotilde Gonzalez. Security under Uncertainty : Adaptive Attackers Are More Challenging to Human Defenders than Random Attackers. Frontiers in Psychology, 2017, 8, 10 p. ⟨hal-03188217⟩

Collections

EMLYON
29 Consultations
37 Téléchargements

Partager

Gmail Facebook X LinkedIn More