Optimal Sensor Deception to Deviate from an Allowed Itinerary
Hazhar Rahmani, Arash Ahadi, and Jie Fu

TL;DR
This paper addresses the problem of planning minimal-cost sensor deception strategies to make an adversarial itinerary appear as an allowed one to a security system, using formal language models and optimization techniques.
Contribution
It introduces a formal framework for sensor deception based on regular languages and provides an exact ILP-based algorithm for optimal strategy computation.
Findings
The sensor deception problem is NP-hard.
An exact ILP-based algorithm effectively computes optimal strategies.
Case studies demonstrate the approach's practicality.
Abstract
In this work, we study a class of deception planning problems in which an agent aims to alter a security monitoring system's sensor readings so as to disguise its adversarial itinerary as an allowed itinerary in the environment. The adversarial itinerary set and allowed itinerary set are captured by regular languages. To deviate without being detected, we investigate whether there exists a strategy for the agent to alter the sensor readings, with a minimal cost, such that for any of those paths it takes, the system thinks the agent took a path within the allowed itinerary. Our formulation assumes an offline sensor alteration where the agent determines the sensor alteration strategy and implement it, and then carry out any path in its deviation itinerary. We prove that the problem of solving the optimal sensor alteration is NP-hard, by a reduction from the directed multi-cut problem.…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdversarial Robustness in Machine Learning · Advanced Malware Detection Techniques · Security and Verification in Computing
