Prospective Artificial Intelligence Approaches for Active Cyber Defence
arXiv:2104.09981
Abstract
Cybercriminals are rapidly developing new malicious tools that leverage artificial intelligence (AI) to enable new classes of adaptive and stealthy attacks. New defensive methods need to be developed to counter these threats. Some cybersecurity professionals are speculating AI will enable corresponding new classes of active cyber defence measures -- is this realistic, or currently mostly hype? The Alan Turing Institute, with expert guidance from the UK National Cyber Security Centre and Defence Science Technology Laboratory, published a research roadmap for AI for ACD last year. This position paper updates the roadmap for two of the most promising AI approaches -- reinforcement learning and causal inference - and describes why they could help tip the balance back towards defenders.
5 pages
References in corpus (6)
- Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning
- Deep Reinforcement Learning for Cyber Security
- Finding Effective Security Strategies through Reinforcement Learning and Self-Play
- The epidemiology of lateral movement: exposures and countermeasures with network contagion models
- Features and Operation of an Autonomous Agent for Cyber Defense
- Modeling Penetration Testing with Reinforcement Learning Using Capture-the-Flag Challenges: Trade-offs between Model-free Learning and A Priori Knowledge
Cited by in corpus (5)
- Learning Near-Optimal Intrusion Responses Against Dynamic Attackers
- Intrusion Prevention through Optimal Stopping
- ExTRUST: Reducing Exploit Stockpiles with a Privacy-Preserving Depletion System for Inter-State Relationships
- Using a Collated Cybersecurity Dataset for Machine Learning and Artificial Intelligence
- A System for Interactive Examination of Learned Security Policies