Our mission
Keeping the nation’s critical infrastructure safe as artificial intelligence is built into it—and using AI to help defend it.
The problem
Three interrelated challenges
Defend against AI-enabled adversaries
Attackers can use AI to find weaknesses, evade detection, tamper with operating data, or coordinate attacks on both the digital and physical parts of a system.
Use AI defensively
AI can spot intrusions, predict equipment failures, and help responders act during wildfire, extreme weather, and other emergencies before essential services are lost.
Keep embedded AI reliable and controllable
AI that runs inside infrastructure must stay trustworthy, resist manipulation, and have clear limits on what it may do without a person’s approval.
Research areas
Where AI meets infrastructure
-
Power grids and wildfire
Using machine learning to decide which transmission lines to switch off when fire risk is high.
-
Cyber defense of control systems
Training reinforcement-learning agents to protect the computers that run energy and other infrastructure.
-
Buildings and emergency response
AI, simulation, and virtual reality to prepare for evacuations, active threats, and extreme events.
-
How people behave in disasters
Simulating how populations respond to hurricane warnings so plans reflect real behavior, not assumptions.
-
Security against adaptive adversaries
Deciding where to put limited defenses when attackers learn and change tactics.
-
Economic consequences and supply chains
Estimating what disasters cost and how quickly supply chains can recover.
-
Safe and trustworthy AI
Comparing human and machine learning, and adapting nuclear-safety methods to large language models.
-
Adapting interconnected networks
How connected systems should adjust under disruption, and how to nudge individual choices toward the common good.
Our approach
From models and testbeds to decisions
-
Simulate
Agent-based models reproduce how populations respond to hurricanes; virtual-reality environments test emergency response in buildings; network models test infrastructure vulnerability.
-
Economic Analysis
The Economic Consequence Analysis Tool (E-CAT) estimates disaster losses; security-game algorithms allocate limited defenses; reinforcement-learning agents defend cyber systems.
-
Decision Analysis
Probabilistic risk methods are adapted to systems built on large language models. Decision analysis compares alternative AI defense mechanisms for effectiveness.
Research community
CREATE AI Research Fellows
Burçin Becerik-Gerber
Professor & Chair, Civil & Environmental Engineering · USC
Human-centered AI for design, operation, and resilience of buildings—especially emergency preparedness and response.
Read more
Advances human-centered artificial intelligence for the design, operation, and resilience of complex built environments, with a particular focus on emergency preparedness and response. She develops AI-driven sensing, simulation, and decision-support systems that integrate human behavior, building performance, and environmental conditions to better anticipate and manage high-risk scenarios such as active threats, evacuations, and extreme events. This work combines virtual reality, agent-based modeling, and data-driven methods to evaluate how design and operational decisions influence safety, health, and human outcomes under uncertainty. By grounding AI in real human experience and spatial context, this research aims to inform evidence-based design, training, and policy strategies that enhance resilience and reduce risk in buildings and communities (Liu, Becerik-Gerber, et al., 2025).
Bistra Dilkina
Associate Professor, Computer Science & ISE · Co-Director, CAIS · USC
Machine-learning-driven combinatorial optimization for large-scale sustainability and planning problems.
Read more
Focuses on advancing the state of the art in combinatorial optimization techniques for solving real-world large-scale problems, particularly ones that arise in sustainability areas such as biodiversity conservation planning and urban planning. Her work is at the intersection of discrete optimization and machine learning. One key area is designing machine-learning-driven combinatorial optimization algorithms, by leveraging the plethora of data generated by solving distributions of real-world optimization problems (Huang, Piansky, Dilkina, & Molzahn, 2025; Pynadath, Dilkina, Jeong, John, et al., 2023).
Richard John
Professor of Psychology · Senior Research Fellow · USC
Algorithms that allocate security resources against adaptive adversaries, informed by behavioral game experiments.
Read more
Has developed and tested algorithms to optimize resource allocation, minimizing the threat, vulnerability, and expected consequences of attacks by adaptive adversaries (Cui & John, 2014; Pita, John, Maheswaran, Tambe, et al., 2012; Yang, Kiekintveld, Ordonez, Tambe, & John, 2013). These algorithms utilize a Stackelberg Security Game framework and account for the adversary’s risk attitude, uncertainty, and conflicting objectives. In addition, the algorithms are designed to relax the usual assumption of a rational adversary and account for heuristics and biases that have been empirically validated in behavioral game experiments. Example events modeled include recovery from a biological attack in a major U.S. city (Pynadath, Rosoff, & John, 2016) and public evacuation response during a hurricane warning (Pynadath, Dilkina, Jeong, John, et al., 2023). These agent-based models are informed by empirical behavioral data collected from surveys and immersive virtual simulation experiments.
Ketan Savla
Associate Professor, Civil & Environmental Engineering · USC
Adaptation protocols and algorithms for resilient interconnected infrastructure under disruption.
Read more
With his research team, has provided quantitative insights into the optimal adaptation protocols for resilience in interconnected systems, such as civil infrastructure. His work considers physics, system connectivity, and behavioral constraints (Savla, Shamma, & Dahleh, 2020). He has also synthesized, and empirically investigated the efficacy of, algorithms that utilize information asymmetry and the power of peer influence to nudge individual decisions towards social good (Zhu & Savla, 2022). These works collectively provide foundations for an AI system to enable complex systems to adapt, from individual-level to systems-level, towards a variety of disruptions.
Samrat Chatterjee
Chief Data Scientist · Pacific Northwest National Laboratory
Safety-critical generative AI and reinforcement-learning agents for cyber and cyber-physical infrastructure.
Read more
Over the past three years has focused on two key areas of safety-critical Generative AI settings for critical infrastructure: (1) understanding infrastructure risk, resilience, and AI connections, and (2) developing robust and secure AI agents based on Reinforcement learning (RL) involving sequential decision making in critical cyber and cyber-physical system settings. While initial progress is promising, more work remains to fully realize the potential for advanced levels of autonomy via AI systems within real-world critical infrastructure operations. (Du, Chatterjee, et al., 2023; Dutta, Chatterjee, et al., 2023; Mukherjee, Chatterjee, et al., 2026; Rahman, Shuvo, Chatterjee, et al., 2025; Rose, Prager, Chen, & Chatterjee, 2017; Thekdi, Tatar, Santos, & Chatterjee, 2023; Thekdi, Tatar, Santos, & Chatterjee, 2024)
Vicki Bier
Professor Emeritus · University of Wisconsin–Madison
AI safety and human/AI collaboration—comparing human and machine learning, and strategies for safer LLMs.
Read more
Has been studying issues related to AI safety and human/AI collaboration. With regard to the former, funding from UW and the National Science Foundation supported work on the relative strengths and weaknesses of human and machine learning. This project built a platform that allowed humans and AI systems to play a set of rule-learning games on an equal basis. Subsequently, Pulick et al. (2022; 2023) presented results of experiments conducted on this platform, expanding for example on the challenges posed by rule generality for human learners, since humans appear to rely on assumptions about possible simple rules, which may complicate learning of rules that don’t fit those schema. With regard to AI safety, Gutfraind and Bier (2023; 2025) highlighted a number of strategies that could be used to help improve the safety and security of large learning models.
Jun Zhuang
Morton C. Frank Professor of Industrial & Systems Engineering
Data-driven and decision-centric AI for homeland security, crisis misinformation, and resource allocation.
Read more
Focuses on advancing data-driven and decision-centric methods for homeland security and disaster management. His prior research applied machine learning to complex security problems, including predicting unauthorized immigration flows using nonparametric models that integrate economic, demographic, climatic, and border security factors, and developing AI frameworks to monitor and classify misinformation on social media during crisis events, enabling more effective situational awareness and resource allocation (Al Aziz, Ahmed, & Zhuang, 2024; Hunt, Agarwal, & Zhuang, 2022). Building on this foundation, his ongoing and future research aims to integrate game theory, multi-criteria decision analysis (MCDA), and Agentic AI to support adaptive, explainable, and strategically informed resource allocation in homeland security and disaster response, particularly in complex, uncertain, and high-risk environments such as the Arctic.
Adam Rose
Research Professor · CREATE Director Emeritus · USC
Machine learning and agent-based models for economic consequences of disasters and supply-chain resilience.
Read more
Research Professor of Public Policy and of Civil and Environmental Engineering, and CREATE Director Emeritus, recently served on a panel at the Symposium on Artificial Intelligence and Public Safety sponsored by the Israeli Consulate of Los Angeles. Professor Rose commented on potential contributions of AI to analyzing the economic consequences of and resilience to man-made and natural disasters. Professor Rose’s research team utilized machine learning in developing the reduced form decision-support system known as the Economic Consequence Analysis Tool (E-CAT) (Rose et al., 2017). He is currently working on a Defense Advanced Research Projects Agency (DARPA) project, in conjunction with Noah Dormady, Associate Professor in the John Glenn College of Public Affairs, integrating resilience (Dormady, Rose, et al., 2022) into agent-based models of critical supply chain resilience on the basis of empirical research production function modeling on a project sponsored by DARPA.
Bibliography
AI References
Show all AI references (24)
- Al Aziz, R., Ahmed, T., Zhuang, J. (2024). A machine learning–based generalized approach for predicting unauthorized immigration flow considering dynamic border security nexus. Risk Analysis, 44(6), 1460–1481. Link
- Bier, V., Kantor, P.B., Lupyan, G., Shu, X. (2019). Can We Distinguish Machine Learning from Human Learning? arXiv preprint arXiv:1910.03466. Link
- Cui, J., John, R.S. (2014). Empirical Comparisons of Descriptive Multi-objective Adversary Models in Stackelberg Security Games. In Decision and Game Theory for Security (GameSec), Springer, pp. 309–318. Link
- Dormady, N., Rose, A., Morin, C.B., and Roa-Henriquez, A. (2022). The Cost-Effectiveness of Economic Resilience. International Journal of Production Economics, 244, 108371. Link
- Du, Y., Chatterjee, S., Bhattacharya, A., Dutta, A., Halappanavar, M. (2023). Role of reinforcement learning for risk-based robust control of cyber-physical energy systems. Risk Analysis, 43(11), 2280–2297. Link
- Dutta, A., Chatterjee, S., Bhattacharya, A., Halappanavar, M. (2023). Deep reinforcement learning for cyber system defense under dynamic adversarial uncertainties. Artificial Intelligence for Cyber Security Workshop, AAAI. Link
- Gutfraind, A., Bier, V.M. (2023). Risk, Uncertainty and AI: Non-probabilistic Methods for Anticipating and Preventing AI Risks. PSAM 2023 Topical Conference. Link
- Gutfraind, A., Bier, V. (2025). From nuclear safety to LLM security: Applying non-probabilistic risk management strategies to build safe and secure LLM-powered systems. arXiv:2505.17084. Link
- Huang, W., Piansky, R., Dilkina, B., Molzahn, R. (2025). Machine Learning Guided Optimal Transmission Switching to Mitigate Wildfire Condition Risk. arXiv:2510.25147. Link
- Hunt, K., Agarwal, P., Zhuang, J. (2022). Monitoring misinformation on Twitter during crisis events: A machine learning approach. Risk Analysis, 42(8), 1728–1748. Link
- Liu, R., Becerik-Gerber, B., Lucas, G.M., and Busta, K. (2025). Impact of behavior-based virtual training on active shooter incident preparedness in healthcare facilities. International Journal of Disaster Risk Reduction, 118, 105225. Link
- Mukherjee, S., Chatterjee, S., Purvine, E., Fujimoto, T., Emerson, T. (2026). Large language model-based reward design for deep reinforcement learning-driven autonomous cyber defense. AI for Cyber Security Workshop, AAAI. Link
- Pita, J., John, R. S., Maheswaran, R., Tambe, M., Yang, R., Kraus, S. (2012). A robust approach to addressing human adversaries in security games. AAMAS-2012. Link
- Pulick, E. M., Menkov, V., Mintz, Y. D., Kantor, P. B., Bier, V. M. (2024). Comparing reinforcement learning and human learning with the game of hidden rules. IEEE Access, 12, 65362–65372. Link
- Pulick, E., Bharti, S., Chen, Y., Menkov, V., Mintz, Y., Kantor, P., Bier, V. M. (2022). The game of hidden rules: A new kind of benchmark challenge for machine learning. arXiv:2207.10218. Link
- Pynadath, D., Dilkina, B., Jeong, D., John, R. S., Marsella, S., Merchant, C., Miller, L., Read, S. (2023). Disaster World: Decision-theoretic agents for simulating population responses to hurricanes. Computational and Mathematical Organization Theory, 29, 84–117. Link
- Pynadath, D., Rosoff, H., John, R. S. (2016). Semi-Automated Construction of Decision-Theoretic Models of Human Behavior. AAMAS-2016. Link
- Rahman, A., Shuvo, S., Chatterjee, S., Halappanavar, M., and Aven, T. (2025). Risk-aware autonomous search and rescue with multiagent reinforcement learning. Risk Analysis, 45(12), 4490–4504. Link
- Rose, A., F. Prager, Z. Chen, and S. Chatterjee. 2017. Economic Consequence Analysis of Disasters: The E-CAT Software Tool. Singapore: Springer. Link
- Savla, K., Shamma, J.S., Dahleh, M.A. (2020). Network Effects on the Robustness of Dynamic Systems. Annual Review of Control, Robotics, and Autonomous Systems, 3. Link
- Thekdi, S., Tatar, U., Santos, J., Chatterjee, S. (2023). Disaster risk and artificial intelligence: A framework to characterize conceptual synergies and future opportunities. Risk Analysis, 43(8), 1641–1656. Link
- Thekdi, S., Tatar, U., Santos, J., Chatterjee, S. (2024). On the compatibility of established methods with emerging artificial intelligence and machine learning methods for disaster risk analysis. Risk Analysis, 45(4), 863–877. Link
- Yang, R., Kiekintveld, C., Ordonez, F., Tambe, M., John, R. S. (2013). Improving resource allocation strategies against human adversaries in security games: An extended study. Artificial Intelligence, 195(2), 440–469. Link
- Zhu, Y., Savla, K. (2022). Information Design in Non-atomic Routing Games with Partial Participation: Computation and Properties. IEEE Transactions on Control of Network Systems, 9(2). Link
Get in touch
Work with CREATE
Government agencies, infrastructure operators, industry partners, and journalists can reach CREATE at [email protected].
CREATE’s AI research is sustained by federal research funding and philanthropy. To support this work, contact us.
