3 papers
cs.CR2026
Agentic Incident Response through Digital Twin-Enhanced Multiscale Planning
Yiran Gao, Tao Li, Kim Hammar
Incident response is currently managed by security operators using predefined playbooks, resulting in slow, labor-intensive security decision-making processes. Consequently, there…
cs.CR2026
In-Context Autonomous Network Incident Response: An End-to-End Large Language Model Agent Approach
Yiran Gao, Kim Hammar, Tao Li
Rapidly evolving cyberattacks demand incident response systems that can autonomously learn and adapt to changing threats. Prior work has extensively explored the reinforcement lear…
cs.LG2025
Online Incident Response Planning under Model Misspecification through Bayesian Learning and Belief Quantization
Kim Hammar, Tao Li
Effective responses to cyberattacks require fast decisions, even when information about the attack is incomplete or inaccurate. However, most decision-support frameworks for incide…