A Learning-Based Approach to Reactive Security
By Adam Barth, Benjamin I. P. Rubinstein, Mukund Sundararajan, John C. Mitchell, Dawn Song, Peter L. Bartlett. 2009
62 citations recorded by the source corpus.
Despite the conventional wisdom that proactive security is superior to reactive security, we show that reactive security can be competitive with proactive security as long as the reactive defender learns from past attacks instead of myopically overreacting to the last attack. Our game-theoretic model follows common practice in the security literature by making worst case assumptions about the attacker: we grant the attacker complete knowledge of the defender's strategy and do not require the attacker to act rationally. In this model, we bound the competitive ratio between a reactive defense algorithm (which is inspired by online learning theory) and the best fixed proactive defense. Additionally, we show that, unlike proactive defenses, this reactive strategy is robust to a lack of information about the attacker's incentives and knowledge.
Subfields: Computer Networks and Communications, Information Systems, Signal Processing
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Computer Networks and Communications
- Battista Biggio
- Fabio Roli
- Giorgio Giacinto
- Giorgio Fumera
- Davide Maiorca
- Blaine Nelson
- Igino Corona
- Benjamin I. P. Rubinstein
In Information Systems
- Battista Biggio
- Fabio Roli
- Giorgio Fumera
- Giorgio Giacinto
- Davide Maiorca
- Blaine Nelson
- Igino Corona
- Benjamin I. P. Rubinstein
In Signal Processing
- Battista Biggio
- Fabio Roli
- Giorgio Giacinto
- Giorgio Fumera
- Davide Maiorca
- Igino Corona
- Blaine Nelson
- Nicholas Carlini
Citations in the corpus
- Security Evaluation of Support Vector Machines in Adversarial Environments (2014, background): “2 Although in certain abstract models we have shown how regret-minimizing online learning can be used to define reactive approaches that are competitive with proactive security [6].”
- The Plight of the Targeted Attacker in a World of Scale (2010, background): “Barth et al. [7] examine the question of reactive security, and show that it can be effective in settings where the defender does not myopically over-react to the most recent attacks.”
- Pattern Recognition Systems under Attack: Design Issues and Research Challenges (2014, background): “4.1, and how to re-engineer their design cycle, using a proactive approach.”