We study automated intrusion response and formulate the interaction between an attacker a defender as optimal stopping game where attack defense strategies evolve through reinforcement learning self-play. The gametheoretic modeling enables us to find that are effective against dynamic attacker, i.e. adapts its strategy in strategy. Further, formulation allows prove best have threshold propertie...