Prospective Artificial Intelligence Approaches for Active Cyber Defence
Not on the map. Why?
Abstract (arXiv)
Cybercriminals are rapidly developing new malicious tools that leverage artificial intelligence (AI) to enable new classes of adaptive and stealthy attacks. New defensive methods need to be developed to counter these threats. Some cybersecurity professionals are speculating AI will enable corresponding new classes of active cyber defence measures -- is this realistic, or currently mostly hype? The Alan Turing Institute, with expert guidance from the UK National Cyber Security Centre and Defence Science Technology Laboratory, published a research roadmap for AI for ACD last year. This position paper updates the roadmap for two of the most promising AI approaches -- reinforcement learning and causal inference - and describes why they could help tip the balance back towards defenders.
Key facts. Cited by 11 papers in the map (data through 7 Oct 2026). Builds on 8 of its 28 references that are in the map. First posted on arXiv 20 Apr 2021.
Builds on
8 of 28 references.
References · 8
- 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 411
- 2019Online Control with Adversarial Disturbancescited by 92
- 2019Deep Reinforcement Learning for Cyber Securitycited by 92
- 2020Finding Effective Security Strategies through Reinforcement Learning and Self-Playcited by 32
- 2016A Stochastic Model of Active Cyber Defense Dynamicscited by 2
- 2016Optimizing Active Cyber Defensecited by 2
- 2019The epidemiology of lateral movement: exposures and countermeasures with network contagion modelscited by 1
- 2019Features and Operation of an Autonomous Agent for Cyber Defensecited by 1
Built on by
Citing papers per year: 2021: 3; 2022: 3; 2023: 2; 2024: 1; 2025: 2.
11 papers.
- 2022Developing Optimal Causal Cyber-Defence Agents via Cyber Security Simulationcited by 37
- 2023Automated Cyber Defence: A Reviewcited by 19
- 2021Intrusion Prevention through Optimal Stoppingcited by 18
- 2023Learning Near-Optimal Intrusion Responses Against Dynamic Attackerscited by 13
- 2022Learning Security Strategies through Game Play and Optimal Stoppingcited by 5
- 2022A System for Interactive Examination of Learned Security Policiescited by 3
- 2021Using a Collated Cybersecurity Dataset for Machine Learning and Artificial Intelligencecited by 2
- 2021Autonomous Attack Mitigation for Industrial Control Systemscited by 1
- 2024Using Quantum Solved Deep Boltzmann Machines to Increase the Data Efficiency of RL Agentscited by 1
- 2025General Autonomous Cybersecurity Defense: Learning Robust Policies for Dynamic Topologies and Diverse Attackerscited by 1
- 2025Graphical Models for Decision-Making: Integrating Causality and Game Theorycited by 0
- 2025General Autonomous Cybersecurity Defense: Learning Robust Policies for Dynamic Topologies and Diverse Attackers28 Jun 2025
- 2025Graphical Models for Decision-Making: Integrating Causality and Game Theory16 Apr 2025
- 2024Using Quantum Solved Deep Boltzmann Machines to Increase the Data Efficiency of RL Agents30 Aug 2024
- 2023Automated Cyber Defence: A Review8 Mar 2023
- 2023Learning Near-Optimal Intrusion Responses Against Dynamic Attackers11 Jan 2023
- 2022Developing Optimal Causal Cyber-Defence Agents via Cyber Security Simulation25 Jul 2022
- 2022Learning Security Strategies through Game Play and Optimal Stopping29 May 2022
- 2022A System for Interactive Examination of Learned Security Policies3 Apr 2022
- 2021Autonomous Attack Mitigation for Industrial Control Systems3 Nov 2021
- 2021Intrusion Prevention through Optimal Stopping30 Oct 2021
- 2021Using a Collated Cybersecurity Dataset for Machine Learning and Artificial Intelligence5 Aug 2021