Deep Reinforcement Learning for Cyber Security
By Thanh Thi Nguyen, Vijay Janappa Reddi. IEEE Transactions on Neural Networks and Learning Systems, 2019
542 citations recorded by the source corpus.
The scale of Internet-connected systems has increased considerably, and these systems are being exposed to cyberattacks more than ever. The complexity and dynamics of cyberattacks require protecting mechanisms to be responsive, adaptive, and scalable. Machine learning, or more specifically deep reinforcement learning (DRL), methods have been proposed widely to address these issues. By incorporating deep learning into traditional RL, DRL is highly capable of solving complex, dynamic, and especially high-dimensional cyber defense problems. This article presents a survey of DRL approaches developed for cyber security. We touch on different vital aspects, including DRL-based security methods for cyber–physical systems, autonomous intrusion detection techniques, and multiagent DRL-based game theory simulations for defense strategies against cyberattacks. Extensive discussions and future research directions on DRL-based cyber security are also given. We expect that this comprehensive review provides the foundations for and facilitates future studies on exploring the potential of emerging DRL to cope with increasingly complex cyber security problems.
Subfields: Computer Networks and Communications, Control and Systems Engineering, Signal Processing
View Paper: https://www.semanticscholar.org/paper/a9b901fcd68a3715d5ef186a398476bc1e762b0e
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Computer Networks and Communications
Citations in the corpus
- Understanding O-RAN: Architecture, Interfaces, Algorithms, Security, and Research Challenges (2022, methodology): “For example, tools such as DRL can be used to adaptively regulate the level of security in the network [139] by controlling encryption rates, detecting intruders and moving services and functionalities to reduce the likelihood they can be targeted by adversarial nodes [140].”