Knowledge mining of unstructured information: application to cyber domain.

Information on cyber-related crimes, incidents, and conflicts is abundantly available in numerous open online sources. However, processing large volumes and streams of data is a challenging task for the analysts and experts, and entails the need for newer methods and techniques. In this article we present and implement a novel knowledge graph and knowledge mining framework for extracting the relevant information from free-form text about incidents in the cyber domain. The computational framework includes a machine learning-based pipeline for generating graphs of organizations, countries, industries, products and attackers with a non-technical cyber-ontology. The extracted knowledge graph is utilized to estimate the incidence of cyberattacks within a given graph configuration. We use publicly available collections of real cyber-incident reports to test the efficacy of our methods. The knowledge extraction is found to be sufficiently accurate, and the graph-based threat estimation demonstrates a level of correlation with the actual records of attacks. In practical use, an analyst utilizing the presented framework can infer additional information from the current cyber-landscape in terms of the risk to various entities and its propagation between industries and countries.

Human-agent coordination in a group formation game.

Coordination and cooperation between humans and autonomous agents in cooperative games raise interesting questions on human decision making and behaviour changes. Here we report our findings from a group formation game in a small-world network of different mixes of human and agent players, aiming to achieve connected clusters of the same colour by swapping places with neighbouring players using non-overlapping information. In the experiments the human players are incentivized by rewarding to prioritize their own cluster while the model of agents' decision making is derived from our previous experiment of purely cooperative game between human players. The experiments were performed by grouping the players in three different setups to investigate the overall effect of having cooperative autonomous agents within teams. We observe that the human subjects adjust to autonomous agents by being less risk averse, while keeping the overall performance efficient by splitting the behaviour into selfish and cooperative actions performed during the rounds of the game. Moreover, results from two hybrid human-agent setups suggest that the group composition affects the evolution of clusters. Our findings indicate that in purely or lesser cooperative settings, providing more control to humans could help in maximizing the overall performance of hybrid systems.

Group formation on a small-world: experiment and modelling.

As a step towards studying human-agent collectives, we conduct an online game with human participants cooperating on a network. The game is presented in the context of achieving group formation through local coordination. The players set initially to a small-world network with limited information on the location of other players, coordinate their movements to arrange themselves into groups. To understand the decision-making process, we construct a data-driven model of agents based on probability matching. The model allows us to gather insight into the nature and degree of rationality employed by the human players. By varying the parameters in agent-based simulations, we are able to benchmark the human behaviour. We observe that while the players use the neighbourhood information in limited capacity, the perception of risk is optimal. We also find that for certain parameter ranges, the agents are able to act more efficiently when compared to the human players. This approach would allow us to simulate the collective dynamics in games with agents having varying strategies playing alongside human proxies.