dorsal/arxiv
View SchemaBaiting AI: Deceptive Adversary Against AI-Protected Industrial Infrastructures
| Authors | Aryan Pasikhani, Prosanta Gope, Yang Yang, Shagufta Mehnaz, Biplab Sikdar |
|---|---|
| Categories | |
| ArXiv ID | 2601.08481vv1 |
| URL | https://arxiv.org/abs/2601.08481 |
| License | http://arxiv.org/licenses/nonexclusive-distrib/1.0/ |
Abstract
This paper explores a new cyber-attack vector targeting Industrial Control Systems (ICS), particularly focusing on water treatment facilities. Developing a new multi-agent Deep Reinforcement Learning (DRL) approach, adversaries craft stealthy, strategically timed, wear-out attacks designed to subtly degrade product quality and reduce the lifespan of field actuators. This sophisticated method leverages DRL methodology not only to execute precise and detrimental impacts on targeted infrastructure but also to evade detection by contemporary AI-driven defence systems. By developing and implementing tailored policies, the attackers ensure their hostile actions blend seamlessly with normal operational patterns, circumventing integrated security measures. Our research reveals the robustness of this attack strategy, shedding light on the potential for DRL models to be manipulated for adversarial purposes. Our research has been validated through testing and analysis in an industry-level setup. For reproducibility and further study, all related materials, including datasets and documentation, are publicly accessible.
{
"annotation_id": "db99c90e-4780-44bd-bd2a-3ee0555edf55",
"date_created": "2026-02-17T05:53:15.848000Z",
"date_modified": "2026-02-17T05:53:15.848000Z",
"file_hash": "b625b008454a328ae5886b6c1dc1f44ed2ab3037d2f9f5bc42686fc98fa51616",
"private": false,
"record": {
"abstract": "This paper explores a new cyber-attack vector targeting Industrial Control Systems (ICS), particularly focusing on water treatment facilities. Developing a new multi-agent Deep Reinforcement Learning (DRL) approach, adversaries craft stealthy, strategically timed, wear-out attacks designed to subtly degrade product quality and reduce the lifespan of field actuators. This sophisticated method leverages DRL methodology not only to execute precise and detrimental impacts on targeted infrastructure but also to evade detection by contemporary AI-driven defence systems. By developing and implementing tailored policies, the attackers ensure their hostile actions blend seamlessly with normal operational patterns, circumventing integrated security measures. Our research reveals the robustness of this attack strategy, shedding light on the potential for DRL models to be manipulated for adversarial purposes. Our research has been validated through testing and analysis in an industry-level setup. For reproducibility and further study, all related materials, including datasets and documentation, are publicly accessible.",
"arxiv_id": "2601.08481",
"authors": [
"Aryan Pasikhani",
"Prosanta Gope",
"Yang Yang",
"Shagufta Mehnaz",
"Biplab Sikdar"
],
"categories": [
"cs.CR"
],
"license": "http://arxiv.org/licenses/nonexclusive-distrib/1.0/",
"title": "Baiting AI: Deceptive Adversary Against AI-Protected Industrial Infrastructures",
"url": "https://arxiv.org/abs/2601.08481",
"version": "v1"
},
"schema_id": "dorsal/arxiv",
"source": {
"execution_id": "c93d07fe-24ff-4f30-bb8d-84448b81fa08",
"id": "arXiv Dataset",
"type": "Model",
"variant": "snapshot-2026-01-17",
"version": "0.1.0"
},
"user_id": 1000002
}