Automated Cyber Defence: A Review
Not on the map. Why?
Abstract (arXiv)
Within recent times, cybercriminals have curated a variety of organised and resolute cyber attacks within a range of cyber systems, leading to consequential ramifications to private and governmental institutions. Current security-based automation and orchestrations focus on automating fixed purpose and hard-coded solutions, which are easily surpassed by modern-day cyber attacks. Research within Automated Cyber Defence will allow the development and enabling intelligence response by autonomously defending networked systems through sequential decision-making agents. This article comprehensively elaborates the developments within Automated Cyber Defence through a requirement analysis divided into two sub-areas, namely, automated defence and attack agents and Autonomous Cyber Operation (ACO) Gyms. The requirement analysis allows the comparison of automated agents and highlights the importance of ACO Gyms for their continual development. The requirement analysis is also used to critique ACO Gyms with an overall aim to develop them for deploying automated agents within real-world networked systems. Relevant future challenges were addressed from the overall analysis to accelerate development within the area of Automated Cyber Defence.
Key facts. Cited by 21 papers in the map (data through 14 Oct 2026). Builds on 49 of its 119 references that are in the map. First posted on arXiv 8 Mar 2023.
Builds on
49 of 119 references.
References · 49
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2017Curiosity-driven Exploration by Self-supervised Predictioncited by 1,194
- 2019Dota 2 with Large Scale Deep Reinforcement Learningcited by 1,103
- 2018Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networkscited by 519
- 2020Sim-to-Real Transfer in Deep Reinforcement Learning for Robotics: a Surveycited by 413
- 2018Metrics for Explainable AI: Challenges and Prospectscited by 260
- 2019Explainable Reinforcement Learning Through a Causal Lenscited by 177
- 2020Toward Trustworthy AI Development: Mechanisms for Supporting Verifiable Claimscited by 165
- 2020Explainable Reinforcement Learning: A Surveycited by 141
- 2019Transferable Clean-Label Poisoning Attacks on Deep Neural Netscited by 131
- 2022Causal Machine Learning: A Survey and Open Problemscited by 110
- 2019Deep Reinforcement Learning for Cyber Securitycited by 95
37 more
- 2018SDRL: Interpretable and Data-efficient Deep Reinforcement Learning Leveraging Symbolic Planningcited by 78
- 2017Hierarchical and Interpretable Skill Acquisition in Multi-task Reinforcement Learningcited by 77
- 2021A Survey on Interpretable Reinforcement Learningcited by 73
- 2021CybORG: A Gym for the Development of Autonomous Cyber Agentscited by 60
- 2018Playing Text-Adventure Games with Graph-Based Deep Reinforcement Learningcited by 53
- 2019Deceptive Reinforcement Learning Under Adversarial Manipulations on Cost Signalscited by 50
- 2021Relating Graph Neural Networks to Structural Causal Modelscited by 41
- 2021Counterfactual State Explanations for Reinforcement Learning Agents via Generative Deep Learningcited by 39
- 2021Causal Reinforcement Learning using Observational and Interventional Datacited by 39
- 2022Developing Optimal Causal Cyber-Defence Agents via Cyber Security Simulationcited by 37
- 2019Autonomous Penetration Testing using Reinforcement Learningcited by 33
- 2020Finding Effective Security Strategies through Reinforcement Learning and Self-Playcited by 32
- 2021Network Environment Design for Autonomous Cyberdefensecited by 32
- 2022A Survey of Explainable Reinforcement Learningcited by 31
- 2020Causally Correct Partial Models for Reinforcement Learningcited by 24
- 2021Explainable Reinforcement Learning for Broad-XAI: A Conceptual Framework and Surveycited by 24
- 2022Causality-driven Hierarchical Structure Discovery for Reinforcement Learningcited by 24
- 2022Beyond CAGE: Investigating Generalization of Learned Autonomous Network Defense Policiescited by 23
- 2017A Game-Theoretic Taxonomy and Survey of Defensive Deception for Cybersecurity and Privacycited by 22
- 2021Reinforcement Learning for Feedback-Enabled Cyber Resiliencecited by 19
- 2021Deep hierarchical reinforcement agents for automated penetration testingcited by 19
- 2021Inherently Explainable Reinforcement Learning in Natural Languagecited by 16
- 2020A multi-component framework for the analysis and design of explainable artificial intelligencecited by 14
- 2021Prospective Artificial Intelligence Approaches for Active Cyber Defencecited by 11
- 2021Learning Intrusion Prevention Policies through Optimal Stoppingcited by 11
- 2021CyGIL: A Cyber Gym for Training Autonomous Agents over Emulated Network Systemscited by 11
- 2018Autonomous Intelligent Cyber-defense Agent (AICA) Reference Architecture. Release 2.0cited by 8
- 2021Crown Jewels Analysis using Reinforcement Learning with Attack Graphscited by 8
- 2021Incorporating Deception into CyberBattleSim for Autonomous Defensecited by 5
- 2021Automating Privilege Escalation with Deep Reinforcement Learningcited by 5
- 2020Deep Reinforcement Learning for DER Cyber-Attack Mitigationcited by 4
- 2022Deep Reinforcement Learning for Cybersecurity Threat Detection and Protection: A Reviewcited by 4
- 2020A Model-Based, Decision-Theoretic Perspective on Automated Cyber Responsecited by 3
- 2020Cyber Autonomy: Automating the Hacker- Self-healing, self-adaptive, automatic cyber defense systems and their impact to the industry, society and national securitycited by 3
- 2018Adaptive Strategic Cyber Defense for Advanced Persistent Threats in Critical Infrastructure Networkscited by 2
- 2018Game-Theoretic Model and Experimental Investigation of Cyber Wargamingcited by 2
- 2021Australia's Approach to AI Governance in Security and Defencecited by 1
Built on by
Citing papers per year: 2023: 2; 2024: 7; 2025: 8; 2026: 4.
21 papers.
Sort:
By area:
- 2024Hierarchical Multi-agent Reinforcement Learning for Cyber Network Defensecited by 17
- 2023Learning Cyber Defence Tactics from Scratch with Multi-Agent Reinforcement Learningcited by 12
- 2024Optimal Defender Strategies for CAGE-2 using Causal Modeling and Tree Searchcited by 12
- 2024CybORG++: An Enhanced Gym for the Development of Autonomous Cyber Agentscited by 11
- 2025Incident Response Planning Using a Lightweight Large Language Model with Reduced Hallucinationcited by 10
- 2024Adversarial Inception Backdoor Attacks against Reinforcement Learningcited by 8
- 2023Deep Reinforcement Learning for Autonomous Cyber Defence: A Surveycited by 7
- 2024RICE: Breaking Through the Training Bottlenecks of Reinforcement Learning with Explanationcited by 7
- 2025Automated Cyber Defense with Generalizable Graph-based Reinforcement Learning Agentscited by 7
- 2024Deep Learning Model Security: Threats and Defensescited by 4
- 2024The Path To Autonomous Cyber Defensecited by 3
- 2025Learning Optimal Defender Strategies for CAGE-2 using a POMDP Modelcited by 3
9 more
- 2026Beyond Rewards in Reinforcement Learning for Cyber Defencecited by 3
- 2025Interpreting Agent Behaviors in Reinforcement-Learning-Based Cyber-Battle Simulation Platformscited by 2
- 2026ACDZero: MCTS Agent for Mastering Automated Cyber Defensecited by 2
- 2025Quantitative Resilience Modeling for Autonomous Cyber Defensecited by 1
- 2025Multi-Agent Reinforcement Learning in Cybersecurity: From Fundamentals to Applicationscited by 1
- 2025General Autonomous Cybersecurity Defense: Learning Robust Policies for Dynamic Topologies and Diverse Attackerscited by 1
- 2026Enhancing Cloud Network Resilience via a Robust LLM-Empowered Multi-Agent Reinforcement Learning Frameworkcited by 1
- 2025Strategic Cyber Defense via Reinforcement Learning-Guided Combinatorial Auctionscited by 0
- 2026Autonomous Cyber Operations Gym for Training and Evaluating AI Models for Defencecited by 0
- 2026Autonomous Cyber Operations Gym for Training and Evaluating AI Models for Defence13 Oct 2026
- 2026Beyond Rewards in Reinforcement Learning for Cyber Defence4 Feb 2026
- 2026Enhancing Cloud Network Resilience via a Robust LLM-Empowered Multi-Agent Reinforcement Learning Framework12 Jan 2026
- 2026ACDZero: MCTS Agent for Mastering Automated Cyber Defense5 Jan 2026
- 2025Automated Cyber Defense with Generalizable Graph-based Reinforcement Learning Agents19 Sep 2025
- 2025Strategic Cyber Defense via Reinforcement Learning-Guided Combinatorial Auctions13 Sep 2025
- 2025Learning Optimal Defender Strategies for CAGE-2 using a POMDP Model8 Sep 2025
- 2025Incident Response Planning Using a Lightweight Large Language Model with Reduced Hallucination7 Aug 2025
- 2025General Autonomous Cybersecurity Defense: Learning Robust Policies for Dynamic Topologies and Diverse Attackers28 Jun 2025
- 2025Interpreting Agent Behaviors in Reinforcement-Learning-Based Cyber-Battle Simulation Platforms9 Jun 2025
- 2025Multi-Agent Reinforcement Learning in Cybersecurity: From Fundamentals to Applications26 May 2025
- 2025Quantitative Resilience Modeling for Autonomous Cyber Defense4 Mar 2025
9 more
- 2024Deep Learning Model Security: Threats and Defenses12 Dec 2024
- 2024Hierarchical Multi-agent Reinforcement Learning for Cyber Network Defense22 Oct 2024
- 2024CybORG++: An Enhanced Gym for the Development of Autonomous Cyber Agents18 Oct 2024
- 2024Adversarial Inception Backdoor Attacks against Reinforcement Learning17 Oct 2024
- 2024Optimal Defender Strategies for CAGE-2 using Causal Modeling and Tree Search12 Jul 2024
- 2024RICE: Breaking Through the Training Bottlenecks of Reinforcement Learning with Explanation5 May 2024
- 2024The Path To Autonomous Cyber Defense12 Apr 2024
- 2023Deep Reinforcement Learning for Autonomous Cyber Defence: A Survey11 Oct 2023
- 2023Learning Cyber Defence Tactics from Scratch with Multi-Agent Reinforcement Learning25 Aug 2023
- 2024CybORG++: An Enhanced Gym for the Development of Autonomous Cyber Agentscited by 11
- 2024Adversarial Inception Backdoor Attacks against Reinforcement Learningcited by 8
- 2024RICE: Breaking Through the Training Bottlenecks of Reinforcement Learning with Explanationcited by 7
- 2025Automated Cyber Defense with Generalizable Graph-based Reinforcement Learning Agentscited by 7
- 2026Beyond Rewards in Reinforcement Learning for Cyber Defencecited by 3
- 2025Interpreting Agent Behaviors in Reinforcement-Learning-Based Cyber-Battle Simulation Platformscited by 2
- 2025Strategic Cyber Defense via Reinforcement Learning-Guided Combinatorial Auctionscited by 0
- 2026Beyond Rewards in Reinforcement Learning for Cyber Defence4 Feb 2026
- 2025Automated Cyber Defense with Generalizable Graph-based Reinforcement Learning Agents19 Sep 2025
- 2025Strategic Cyber Defense via Reinforcement Learning-Guided Combinatorial Auctions13 Sep 2025
- 2025Interpreting Agent Behaviors in Reinforcement-Learning-Based Cyber-Battle Simulation Platforms9 Jun 2025
- 2024CybORG++: An Enhanced Gym for the Development of Autonomous Cyber Agents18 Oct 2024
- 2024Adversarial Inception Backdoor Attacks against Reinforcement Learning17 Oct 2024
- 2024RICE: Breaking Through the Training Bottlenecks of Reinforcement Learning with Explanation5 May 2024
- 2024Deep Learning Model Security: Threats and Defensescited by 4
- 2024Deep Learning Model Security: Threats and Defenses12 Dec 2024
- 2024Hierarchical Multi-agent Reinforcement Learning for Cyber Network Defensecited by 17
- 2023Learning Cyber Defence Tactics from Scratch with Multi-Agent Reinforcement Learningcited by 12
- 2024Optimal Defender Strategies for CAGE-2 using Causal Modeling and Tree Searchcited by 12
- 2025Incident Response Planning Using a Lightweight Large Language Model with Reduced Hallucinationcited by 10
- 2023Deep Reinforcement Learning for Autonomous Cyber Defence: A Surveycited by 7
- 2024The Path To Autonomous Cyber Defensecited by 3
- 2025Learning Optimal Defender Strategies for CAGE-2 using a POMDP Modelcited by 3
- 2026ACDZero: MCTS Agent for Mastering Automated Cyber Defensecited by 2
- 2025Quantitative Resilience Modeling for Autonomous Cyber Defensecited by 1
- 2025Multi-Agent Reinforcement Learning in Cybersecurity: From Fundamentals to Applicationscited by 1
- 2025General Autonomous Cybersecurity Defense: Learning Robust Policies for Dynamic Topologies and Diverse Attackerscited by 1
- 2026Autonomous Cyber Operations Gym for Training and Evaluating AI Models for Defencecited by 0
- 2026Autonomous Cyber Operations Gym for Training and Evaluating AI Models for Defence13 Oct 2026
- 2026ACDZero: MCTS Agent for Mastering Automated Cyber Defense5 Jan 2026
- 2025Learning Optimal Defender Strategies for CAGE-2 using a POMDP Model8 Sep 2025
- 2025Incident Response Planning Using a Lightweight Large Language Model with Reduced Hallucination7 Aug 2025
- 2025General Autonomous Cybersecurity Defense: Learning Robust Policies for Dynamic Topologies and Diverse Attackers28 Jun 2025
- 2025Multi-Agent Reinforcement Learning in Cybersecurity: From Fundamentals to Applications26 May 2025
- 2025Quantitative Resilience Modeling for Autonomous Cyber Defense4 Mar 2025
- 2024Hierarchical Multi-agent Reinforcement Learning for Cyber Network Defense22 Oct 2024
- 2024Optimal Defender Strategies for CAGE-2 using Causal Modeling and Tree Search12 Jul 2024
- 2024The Path To Autonomous Cyber Defense12 Apr 2024
- 2023Deep Reinforcement Learning for Autonomous Cyber Defence: A Survey11 Oct 2023
- 2023Learning Cyber Defence Tactics from Scratch with Multi-Agent Reinforcement Learning25 Aug 2023