Abstract: A negotiation evaluation system determines that a target computing system is experiencing a computing system attack. The negotiation evaluation system determines a set of attack characteristics associated with the computing system attack. Based on the set of attack characteristics, a negotiation estimation model generates response value data describing potential responses to the attack. Based on the response value data, a negotiation communication model generates reply text data describing a reply to the computing system attack. The negotiation evaluation system provides the reply text data to a malicious computing system that is associated with the computing system attack.

Abstract: A negotiation evaluation system determines that a target computing system is experiencing a computing system attack. The negotiation evaluation system determines a set of attack characteristics associated with the computing system attack. Based on the set of attack characteristics, a negotiation estimation model generates response value data describing potential responses to the attack. Based on the response value data, a negotiation communication model generates reply text data describing a reply to the computing system attack. The negotiation evaluation system provides the reply text data to a malicious computing system that is associated with the computing system attack.

Abstract: This disclosure describes techniques for maintaining and using a warehouse of data about potential or actual cyberattack threats for an industry. In one example, this disclosure describes a method that includes outputting, by a computing system operated by a first entity and to a data warehouse, information about activity within a first network operated by the first entity; receiving, by the computing system and from the data warehouse, information about attributes of a peer attack directed to a second network operated by a second entity, wherein the first entity and the second entity may be marketplace competitors; applying, by the computing system, a model to identify a network asset included within the first network that is vulnerable to an attack having the attributes of the peer attack; and outputting, by the computing system and to the network asset, a control signal to modify the operation of the network asset.