Learning Cyber Defence Tactics from Scratch with Multi-Agent Reinforcement Learning
Not on the map. Why?
Abstract (arXiv)
Recent advancements in deep learning techniques have opened new possibilities for designing solutions for autonomous cyber defence. Teams of intelligent agents in computer network defence roles may reveal promising avenues to safeguard cyber and kinetic assets. In a simulated game environment, agents are evaluated on their ability to jointly mitigate attacker activity in host-based defence scenarios. Defender systems are evaluated against heuristic attackers with the goals of compromising network confidentiality, integrity, and availability. Value-based Independent Learning and Centralized Training Decentralized Execution (CTDE) cooperative Multi-Agent Reinforcement Learning (MARL) methods are compared revealing that both approaches outperform a simple multi-agent heuristic defender. This work demonstrates the ability of cooperative MARL to learn effective cyber defence tactics against varied threats.
Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Builds on 26 of its 68 references that are in the map. First posted on arXiv 25 Aug 2023.
Builds on
26 of 68 references.
References · 26
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2013Playing Atari with Deep Reinforcement Learningcited by 3,211
- 2016Asynchronous Methods for Deep Reinforcement Learningcited by 2,218
- 2015Deep Reinforcement Learning with Double Q-learningcited by 1,704
- 2017Multi-Agent Actor-Critic for Mixed Cooperative-Competitive Environmentscited by 1,519
- 2021The Surprising Effectiveness of PPO in Cooperative, Multi-Agent Gamescited by 903
- 2017Rainbow: Combining Improvements in Deep Reinforcement Learningcited by 774
- 2018QMIX: Monotonic Value Function Factorisation for Deep Multi-Agent Reinforcement Learningcited by 697
- 2019The StarCraft Multi-Agent Challengecited by 589
- 2017Value-Decomposition Networks For Cooperative Multi-Agent Learningcited by 490
- 2020Benchmarking Multi-Agent Deep Reinforcement Learning Algorithms in Cooperative Taskscited by 207
- 2020RODE: Learning Roles to Decompose Multi-Agent Taskscited by 125
14 more
- 2022SMACv2: An Improved Benchmark for Cooperative Multi-Agent Reinforcement Learningcited by 118
- 2019Deep Reinforcement Learning for Cyber Securitycited by 92
- 2020Qatten: A General Framework for Cooperative Multiagent Reinforcement Learningcited by 81
- 2021Rethinking the Implementation Tricks and Monotonicity Constraint in Cooperative Multi-Agent Reinforcement Learningcited by 68
- 2021CybORG: A Gym for the Development of Autonomous Cyber Agentscited by 58
- 2019From Few to More: Large-scale Dynamic Multiagent Curriculum Learningcited by 36
- 2020Finding Effective Security Strategies through Reinforcement Learning and Self-Playcited by 32
- 2021Network Environment Design for Autonomous Cyberdefensecited by 29
- 2022Beyond CAGE: Investigating Generalization of Learned Autonomous Network Defense Policiescited by 22
- 2023Automated Cyber Defence: A Reviewcited by 19
- 2023A Multiagent CyberBattleSim for RL Cyber Operation Agentscited by 8
- 2022Transformer-based Value Function Decomposition for Cooperative Multi-agent Reinforcement Learning in StarCraftcited by 5
- 2023SoK: Adversarial Machine Learning Attacks and Defences in Multi-Agent Reinforcement Learningcited by 3
- 2023Enabling A Network AI Gym for Autonomous Cyber Agentscited by 3
Built on by
Citing papers per year: 2023: 1; 2024: 2; 2025: 7; 2026: 2.
12 papers.
- 2024Optimal Defender Strategies for CAGE-2 using Causal Modeling and Tree Searchcited by 12
- 2023Deep Reinforcement Learning for Autonomous Cyber Defence: A Surveycited by 6
- 2025Unveiling the Black Box: A Multi-Layer Framework for Explaining Reinforcement Learning-Based Cyber Agentscited by 4
- 2025Large Language Model Integration with Reinforcement Learning to Augment Decision-Making in Autonomous Cyber Operationscited by 3
- 2024Multi-Agent Actor-Critics in Autonomous Cyber Defensecited by 2
- 2025Learning to Communicate in Multi-Agent Reinforcement Learning for Autonomous Cyber Defencecited by 2
- 2025A Comparative Evaluation of Teacher-Guided Reinforcement Learning Techniques for Autonomous Cyber Operationscited by 2
- 2025Towards Production-Worthy Simulation for Autonomous Cyber Operationscited by 2
- 2025Quantitative Resilience Modeling for Autonomous Cyber Defensecited by 1
- 2025PoolFlip: A Multi-Agent Reinforcement Learning Security Environment for Cyber Defensecited by 0
- 2026Learning Communication Between Heterogeneous Agents in Multi-Agent Reinforcement Learning for Autonomous Cyber Defencecited by 0
- 2026Distilling Knowledge from Large Language Models into Lightweight Reinforcement Learning Agents for Autonomous Cyber Operationscited by 0
- 2026Distilling Knowledge from Large Language Models into Lightweight Reinforcement Learning Agents for Autonomous Cyber Operations30 Jul 2026
- 2026Learning Communication Between Heterogeneous Agents in Multi-Agent Reinforcement Learning for Autonomous Cyber Defence17 Mar 2026
- 2025Large Language Model Integration with Reinforcement Learning to Augment Decision-Making in Autonomous Cyber Operations28 Aug 2025
- 2025PoolFlip: A Multi-Agent Reinforcement Learning Security Environment for Cyber Defense27 Aug 2025
- 2025Towards Production-Worthy Simulation for Autonomous Cyber Operations23 Aug 2025
- 2025A Comparative Evaluation of Teacher-Guided Reinforcement Learning Techniques for Autonomous Cyber Operations20 Aug 2025
- 2025Learning to Communicate in Multi-Agent Reinforcement Learning for Autonomous Cyber Defence19 Jul 2025
- 2025Unveiling the Black Box: A Multi-Layer Framework for Explaining Reinforcement Learning-Based Cyber Agents16 May 2025
- 2025Quantitative Resilience Modeling for Autonomous Cyber Defense4 Mar 2025
- 2024Multi-Agent Actor-Critics in Autonomous Cyber Defense11 Oct 2024
- 2024Optimal Defender Strategies for CAGE-2 using Causal Modeling and Tree Search12 Jul 2024
- 2023Deep Reinforcement Learning for Autonomous Cyber Defence: A Survey11 Oct 2023