CyberdeceptionAtlas · Question → testES

Library / Paper

Paper

Optimal Timing in Dynamic and Robust Attacker Engagement During Advanced Persistent Threats

This paper studies a scenario where a defender uses honeynets for active defense to observe an attacker who has penetrated the network. The authors propose an infinite-horizon Markov decision process over a continuous state space to model when to eject the attacker after gathering information, and analyze the robustness of this policy via a Stackelberg game, with simulations on a conceptual network.

HoneypotAdversary engagementNetwork

What we know

This paper studies a scenario where a defender uses honeynets for active defense to observe an attacker who has penetrated the network. The authors propose an infinite-horizon Markov decision process over a continuous state space to model when to eject the attacker after gathering information, and analyze the robustness of this policy via a Stackelberg game, with simulations on a conceptual network.

Evidence limits

This entry is based solely on the available title and abstract; the full text has not been reviewed and the effectiveness of the proposed policy has not been independently validated.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. Optimal Timing in Dynamic and Robust Attacker Engagement During Advanced Persistent Threats
    abstract · 2026-10-04

Reviewed: 2026-10-04. This record may change when new evidence is found.

RIS · BibTeX