Adversarial Adaptation

Decision problem

How should a platform evaluate a defense when attackers respond strategically rather than remaining a fixed test population?

Working model

Interventions change attacker cost, information, capacity, route choice, and target selection. Evaluation must measure ecosystem-level harm and displacement over time, not only repeat activity by sanctioned accounts.

Research questions

• Which response details create the most valuable attacker feedback?
• How can long-lived holdouts be ethical and operationally safe?
• What distinguishes evasion from benign distribution shift?
• When does raising cost select for more capable and harmful adversaries?

Affected chapters

Chapters 3, 10–16, 19, and 20.