README.md

metadata

title: AI Deception OpenEnv
emoji: 🛡️
colorFrom: blue
colorTo: purple
sdk: docker
app_port: 7860
pinned: false

🛡️ AI Cyber Deception OpenEnv

Overview

AI Cyber Deception OpenEnv is a real-world cybersecurity simulation environment where an AI agent learns to detect, deceive, and mitigate cyber attacks.

This environment simulates production-like cybersecurity defense scenarios including brute force attacks, port scanning, SQL injection, directory traversal, and credential stuffing.

The environment follows the OpenEnv specification and supports:

• reset()
• step()
• state()

---

🎯 Real-World Task

Simulate cybersecurity defense in a production-like environment:

• Detect brute force attacks
• Detect port scanning
• Detect SQL injection
• Detect directory traversal
• Deploy deception mechanisms
• Block malicious attackers

---

⚙️ Action Space

The AI agent can perform the following actions:

• detect_attack
• deploy_honeypot
• fake_database
• block_ip

---

👁️ Observation Space

Environment returns structured observation:

• failed_logins
• port_scans
• suspicious_ips
• total_requests
• attack_types

---

🧠 Tasks

Easy Task

Detect cyber attack

Goal:

• Detect suspicious activity
• Identify attack patterns

---

Medium Task

Detect attack and deploy deception

Goal:

• Detect cyber attack
• Deploy honeypot or fake database

---

Hard Task

Full cyber defense workflow

Goal:

• Detect attack
• Deploy deception
• Block attacker

---

🏆 Reward Function

Action	Reward
detect_attack	0.15–0.45
deploy_honeypot	0.30
fake_database	0.20
block_ip (correct)	0.70
early block	0.05

Reward range normalized between 0.0 – 1.0

---

🌐 API Endpoints

Available endpoints:

• /reset
• /step
• /state
• /logs
• /status

Example:

POST /reset POST /step GET /state

---

🚀 Run Locally

Install dependencies:

pip install -r requirements.txt

Run inference:

python inference.py
🐳 Docker

Build:

docker build -t ai-deception .

Run:

docker run -p 7860:7860 ai-deception
🤗 Hugging Face Deployment

Live Space:

https://bytecore1-ai-deception-openenv.hf.space/

Endpoints:

https://bytecore1-ai-deception-openenv.hf.space/reset

https://bytecore1-ai-deception-openenv.hf.space/state

https://bytecore1-ai-deception-openenv.hf.space/status

https://bytecore1-ai-deception-openenv.hf.space/logs

📊 Baseline Results

Example run:

[START] task=easy env=ai-deception-openenv model=Qwen
[STEP] step=1 action=detect_attack reward=0.45 done=false error=null
[STEP] step=2 action=deploy_honeypot reward=0.30 done=false error=null
[STEP] step=3 action=block_ip reward=0.70 done=true error=null
[END] success=true steps=3 score=0.48 rewards=0.45,0.30,0.70
🏗️ Architecture
Attacker
   ↓
Fake Server
   ↓
AI Agent (Inference)
   ↓
Defense Actions
   ↓
Reward
📦 Project Structure

ai-deception-openenv/
│
├── env/
│   ├── __init__.py
│   ├── attacker.py
│   ├── deception.py
│   ├── env.py
│   ├── fake_server.py
│   ├── test_env.py
│   └── test_server.py
│
├── tasks/
│   ├── __init__.py
│   │
│   ├── easy/
│   │   ├── __init__.py
│   │   ├── task.py
│   │   └── grader.py
│   │
│   ├── medium/
│   │   ├── __init__.py
│   │   ├── task.py
│   │   └── grader.py
│   │
│   ├── hard/
│   │   ├── __init__.py
│   │   ├── task.py
│   │   └── grader.py
│   │
│   └── test_tasks.py
│
├── server/
│   └── app.py
│
├── inference.py
├── app.py
├── models.py
├── openenv.yaml
├── Dockerfile
├── requirements.txt
├── pyproject.toml
├── uv.lock
├── README.md
├── LICENSE
├── .gitignore
└── .gitattributes

✅ OpenEnv Compliance
reset() implemented
step() implemented
state() implemented
Docker support
Structured logs
Multiple tasks
Reward normalization
👨‍💻 Use Case

This environment can be used for:

Cybersecurity research
Reinforcement learning
AI defense strategy training
Red team vs blue team simulations
🛡️ AI Cyber Deception

This project demonstrates how AI can:

Detect attackers
Deploy deception
Block malicious actors
Learn defensive strategies
License

MIT License