AI 中文总结
研究人工智能辅助网络安全系统中群体结构对攻防动态的影响。提出混合角色进化博弈框架，结合随机进化分析与模拟。发现交互结构是关键决定因素，局部网络交互组织防御主体可提升网络长期弹性。
AI 中文摘要
人工智能辅助的网络安全系统的特点是攻击者和防御者之间不断适应，这使得进化博弈论成为研究其长期行为的自然框架。然而，现有的进化网络安全模型主要关注同质交互，对群体结构如何影响网络攻防动态的理解有限。本文中，我们开发了一个混合角色进化博弈，其中适应性网络主体可以表现出进攻和防御行为，并研究其在完全混合和结构化群体中的动态。所提出的框架将随机进化分析与大规模基于主体的模拟相结合，以研究交互结构如何塑造长期战略行为。我们的结果揭示了全局和局部交互之间的根本差异。虽然完全混合群体中攻击和防御策略广泛共存，但结构化群体产生明确的进化模式，其中安全防御行为在更大的参数空间区域占主导。空间分析进一步表明，相邻防御者自然形成有弹性的集群，通过网络互惠抑制持续攻击。这些发现表明交互结构是人工智能辅助网络安全进化的基本决定因素，并表明通过局部网络交互组织防御主体可以在不需要额外防御激励的情况下大幅提高长期网络弹性。
英文摘要
AI-assisted cybersecurity systems are characterised by continuous adaptation between attackers and defenders, making evolutionary game theory a natural framework for studying their long-term behaviour. However, existing evolutionary cybersecurity models have primarily focused on homogeneous interactions, providing limited understanding of how population structure influences cyber attack-defence dynamics. In this paper, we develop a mixed-role evolutionary game in which adaptive cyber agents can exhibit both offensive and defensive behaviours, and investigate its dynamics in well-mixed and structured populations. The proposed framework combines stochastic evolutionary analysis with large-scale agent-based simulations to examine how interaction structure shapes long-run strategic behaviour. Our results reveal a fundamental difference between global and local interactions. While well-mixed populations exhibit broad coexistence between attacking and defensive strategies, structured populations generate well-defined evolutionary regimes in which secure defensive behaviour becomes dominant over a much larger region of the parameter space. Spatial analysis further shows that neighbouring defenders naturally form resilient clusters that suppress persistent attacks through network reciprocity. These findings demonstrate that interaction structure is a fundamental determinant of AI-assisted cybersecurity evolution and suggest that organising defensive agents through local networked interactions can substantially improve long-term cyber resilience without requiring additional defensive incentives.
