4 papers · 1 filter
Agentic Incident Response through Digital Twin-Enhanced Multiscale Planning
Yiran Gao, Tao Li, Kim Hammar
Incident response is currently managed by security operators using predefined playbooks, resulting in slow, labor-intensive security decision-making processes. Consequently, there…
CSLE: A Reinforcement Learning Platform for Autonomous Security Management
Kim Hammar
Reinforcement learning is a promising approach to autonomous and adaptive security management in networked systems. However, current reinforcement learning solutions for security m…
In-Context Autonomous Network Incident Response: An End-to-End Large Language Model Agent Approach
Yiran Gao, Kim Hammar, Tao Li
Rapidly evolving cyberattacks demand incident response systems that can autonomously learn and adapt to changing threats. Prior work has extensively explored the reinforcement lear…
Incident Response Planning Using a Lightweight Large Language Model with Reduced Hallucination
Kim Hammar, Tansu Alpcan, Emil C. Lupu
Timely and effective incident response is key to managing the growing frequency of cyberattacks. However, identifying the right response actions for complex systems is a major tech…