ArXiv TLDR

The Adversarial Discount - AI, Signal Correlation, and the Cybersecurity Arms Race

🐦 Tweet
2605.04336

James W. Bono

econ.THcs.CRcs.GT

TLDR

A model of AI-driven cybersecurity arms races reveals how signal correlation neutralizes attacker advantages and highlights defense inefficiencies.

Key contributions

  • Develops a contest model for AI-augmented cybersecurity investment across multiple attack surfaces.
  • Introduces an "adversarial discount" where attacker investment erodes defensive effectiveness.
  • Derives an "arms race ratio" and shows signal cross-correlation neutralizes attacker surface proliferation.
  • Identifies inefficiencies: overinvestment in private defense and underinvestment in shared signal correlation.

Why it matters

This paper formally models the AI-driven cybersecurity arms race, revealing how shared signal correlation neutralizes attacker advantages from proliferating attack surfaces. It highlights inefficiencies in private defense and advocates for collective information aggregation as a dominant strategy.

Original Abstract

We study a contest-theoretic model of adversarial investment in which an attacker and a defender allocate resources to AI-augmented capabilities across multiple attack surfaces. The attacker's investment operates through two channels: it amplifies offensive potency unconditionally and erodes defensive effectiveness conditionally, generating an adversarial discount that deepens endogenously with the defender's own investment. We derive a closed-form arms race ratio decomposing the relative marginal effectiveness of offensive and defensive investment into six structural primitives and establish equilibrium uniqueness and global convergence under a continuous best-response dynamic. The central result concerns signal cross-correlation, the degree to which threat intelligence on one surface informs detection on another. With full cross-correlation, the arms race ratio is independent of the number of attack surfaces: the attacker's structural advantage from surface proliferation is completely neutralized. Under the benchmark full-dilution case, without cross-correlation, per-surface defense effectiveness vanishes as the attack surface grows. Extending the analysis to heterogeneous defenders facing an attacker who targets by expected value, we argue that the model points to a dual inefficiency: overinvestment in private defense (a zero-sum redirective externality) and underinvestment in shared signal correlation (a public good). These formal results, together with public-good reasoning outside the base model, characterize when collective information aggregation can dominate private capability investment as the decisive margin in adversarial contests.

📬 Weekly AI Paper Digest

Get the top 10 AI/ML arXiv papers from the week — summarized, scored, and delivered to your inbox every Monday.