Machine learning techniques to generate negotiation data during computing system attacks

A method including operations executed by a processor, the operations comprising:

• determining, based on alert data indicating an initiation of a computing system attack against a target computing system, a set of attack characteristics associated with the computing system attack against the target computing system;
• receiving, from a trained negotiation estimation model, response value data that is determined by the trained negotiation estimation model based on the set of attack characteristics;
• receiving, from a trained negotiation communication model, text data that includes a reply to the computing system attack, wherein the reply is determined by the trained negotiation communication model based on the response value data;
• and
• providing the text data to a malicious computing system corresponding to the computing system attack.

A non-transitory computer-readable medium embodying program code that, when executed by a processor, causes the processor to perform operations comprising:

• determining, based on alert data indicating an initiation of a computing system attack against a target computing system, a set of attack characteristics associated with the computing system attack against the target computing system;
• receiving, from a trained negotiation estimation model, response value data that is determined by the trained negotiation estimation model based on the set of attack characteristics;
• receiving, from a trained negotiation communication model, text data that includes a reply to the computing system attack, wherein the reply is determined by the trained negotiation communication model based on the response value data;
• and
• providing the text data to a malicious computing system corresponding to the computing system attack.