# Tackling Cyberattacks through AI-based Reactive Systems: A Holistic Review and Future Vision

arXiv: https://arxiv.org/abs/2312.06229 · HTML: https://mlsanity.com/paper/2312.06229/

## Key facts

- Cited by 2 papers in the map (data through 14 Oct 2026).
- Builds on 15 of its 190 references that are in the map.
- First posted on arXiv 11 Dec 2023.

## Builds on (most cited first, 15 of 15)

- [Attention Is All You Need](https://mlsanity.com/paper/1706.03762/) (2017)
- [Language Models are Few-Shot Learners](https://mlsanity.com/paper/2005.14165/) (2020)
- [Release Strategies and the Social Impacts of Language Models](https://mlsanity.com/paper/1908.09203/) (2019)
- [Metrics for Explainable AI: Challenges and Prospects](https://mlsanity.com/paper/1812.04608/) (2018)
- [k-Sparse Autoencoders](https://mlsanity.com/paper/1312.5663/) (2013)
- [A Hierarchy of Limitations in Machine Learning](https://mlsanity.com/paper/2002.05193/) (2020)
- [Discovering Exfiltration Paths Using Reinforcement Learning with Attack Graphs](https://mlsanity.com/paper/2201.12416/) (2022)
- [An Intrusion Response System utilizing Deep Q-Networks and System Partitions](https://mlsanity.com/paper/2202.08182/) (2022)
- [Strategic Decompositions of Normal Form Games: Zero-sum Games and Potential Games](https://mlsanity.com/paper/1602.06648/) (2016)
- [Threats and Countermeasures of Cyber Security in Direct and Remote Vehicle Communication Systems](https://mlsanity.com/paper/2006.08723/) (2020)
- [A Novel Online Incremental Learning Intrusion Prevention System](https://mlsanity.com/paper/2109.09530/) (2021)
- [Impersonation on Social Media: A Deep Neural Approach to Identify Ingenuine Content](https://mlsanity.com/paper/2010.08438/) (2020)
- [A Comprehensive Survey on the Cyber-Security of Smart Grids: Cyber-Attacks, Detection, Countermeasure Techniques, and Future Directions](https://mlsanity.com/paper/2207.07738/) (2022)
- [Intrusion Response Systems: Past, Present and Future](https://mlsanity.com/paper/2303.03070/) (2023)
- [Cost-damage analysis of attack trees](https://mlsanity.com/paper/2304.05812/) (2023)

## Built on by (most cited first, 2 of 2)

- [DecoyTrace: Toxic Decoys for Active Defense in Decentralized Federated Learning](https://mlsanity.com/paper/2609.36330/) (2026)
- [Dynamical low-rank equilibrium computation for stochastic games between advanced persistent threats and moving target defense](https://mlsanity.com/paper/2610.06885/) (2026)

## Abstract (arXiv)

There is no denying that the use of Information Technology (IT) is undergoing exponential growth in today's world. This digital transformation has also given rise to a multitude of security challenges, notably in the realm of cybercrime. In response to these growing threats, public and private sectors have prioritized the strengthening of IT security measures. In light of the growing security concern, Artificial Intelligence (AI) has gained prominence within the cybersecurity landscape. This paper presents a comprehensive survey of recent advancements in AI-driven threat response systems. To the best of our knowledge, the most recent survey covering the AI reaction domain was conducted in 2017. Since then, considerable literature has been published, and therefore, it is worth reviewing it. In this comprehensive survey of the state of the art reaction systems, five key features with multiple values have been identified, facilitating a homogeneous comparison between the different works. In addition, through a meticulous methodology of article collection, the 22 most relevant publications in the field have been selected. Then each of these publications has been subjected to a detailed analysis using the features identified, which has allowed for the generation of a comprehensive overview revealing significant relationships between the papers. These relationships are further elaborated in the paper, along with the identification of potential gaps in the literature, which may guide future contributions. A total of seven research challenges have been identified, pointing out these potential gaps and suggesting possible areas of development through concrete proposals.
