A Survey for Deep Reinforcement Learning Based Network Intrusion Detection
On the map: Deep reinforcement learning methods → Adversarial robustness and RL in finance
Abstract (arXiv)
Cyber-attacks are becoming increasingly sophisticated and frequent, highlighting the importance of network intrusion detection systems. This paper explores the potential and challenges of using deep reinforcement learning (DRL) in network intrusion detection. It begins by introducing key DRL concepts and frameworks, such as deep Q-networks and actor-critic algorithms, and reviews recent research utilizing DRL for intrusion detection. The study evaluates challenges related to model training efficiency, detection of minority and unknown class attacks, feature selection, and handling unbalanced datasets. The performance of DRL models is comprehensively analyzed, showing that while DRL holds promise, many recent technologies remain underexplored. Some DRL models achieve state-of-the-art results on public datasets, occasionally outperforming traditional deep learning methods. The paper concludes with recommendations for enhancing DRL deployment and testing in real-world network scenarios, with a focus on Internet of Things intrusion detection. It discusses recent DRL architectures and suggests future policy functions for DRL-based intrusion detection. Finally, the paper proposes integrating DRL with generative methods to further improve performance, addressing current gaps and supporting more robust and adaptive network intrusion detection systems.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Adversarial robustness and RL in finance, one of 15 directions in Deep reinforcement learning methods. Builds on 34 of its 144 references that are in the map. First posted on arXiv 25 Sep 2024.
Builds on
34 of 144 references.
References · 34
- 2017Attention Is All You Needcited by 60,361
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2023Mamba: Linear-Time Sequence Modeling with Selective State Spacescited by 4,718
- 2015Trust Region Policy Optimizationcited by 2,580
- 2016Asynchronous Methods for Deep Reinforcement Learningcited by 2,258
- 2023A Survey on Evaluation of Large Language Modelscited by 1,242
- 2024KAN: Kolmogorov-Arnold Networkscited by 649
- 2024Learning to (Learn at Test Time): RNNs with Expressive Hidden Statescited by 355
- 2017Deep Reinforcement Learning: An Overviewcited by 333
- 2018A Survey of Inverse Reinforcement Learning: Challenges, Methods and Progresscited by 298
- 2024Reinforcement learningcited by 247
- 2015Maximum Entropy Deep Inverse Reinforcement Learningcited by 176
22 more
- 2022Exploration in Deep Reinforcement Learning: A Surveycited by 166
- 2017Deep Reinforcement Learning for De-Novo Drug Designcited by 161
- 2018Learning to Learn from Noisy Labeled Datacited by 160
- 2024LLM Agents can Autonomously Exploit One-day Vulnerabilitiescited by 128
- 2024Survey on Large Language Model-Enhanced Reinforcement Learning: Concept, Taxonomy, and Methodscited by 116
- 2019Deep Reinforcement Learning for Cyber Securitycited by 95
- 2020Sample Efficient Reinforcement Learning with REINFORCEcited by 86
- 2023From task structures to world models: What do LLMs know?cited by 46
- 2017Applications of Deep Learning and Reinforcement Learning to Biological Datacited by 45
- 2024WorldGPT: Empowering LLM as Multimodal World Modelcited by 42
- 2018Deep Reinforcement Learning For Sequence to Sequence Modelscited by 39
- 2022Developing Optimal Causal Cyber-Defence Agents via Cyber Security Simulationcited by 37
- 2020Finding Effective Security Strategies through Reinforcement Learning and Self-Playcited by 32
- 2021Reinforcement Learning for IoT Security: A Comprehensive Surveycited by 23
- 2023NASimEmu: Network Attack Simulator & Emulator for Training Agents Generalizing to Novel Scenarioscited by 20
- 2021Intrusion Prevention through Optimal Stoppingcited by 18
- 2024Machine learning-based network intrusion detection for big and imbalanced data using oversampling, stacking feature embedding and feature extractioncited by 16
- 2018TStarBots: Defeating the Cheating Level Builtin AI in StarCraft II in the Full Gamecited by 14
- 2023Transformers in Reinforcement Learning: A Surveycited by 12
- 2019A New Tensioning Method using Deep Reinforcement Learning for Surgical Pattern Cuttingcited by 9
- 2021Deep Q-Learning based Reinforcement Learning Approach for Network Intrusion Detectioncited by 8
- 2022Behaviour-Diverse Automatic Penetration Testing: A Curiosity-Driven Multi-Objective Deep Reinforcement Learning Approachcited by 7
Built on by
Citing papers per year: 2025: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025A Novel and Practical Universal Adversarial Perturbations against Deep Reinforcement Learning based Intrusion Detection Systems
- 2024Multi-agent Reinforcement Learning-based Network Intrusion Detection System
- 2025Enhancing Security in Deep Reinforcement Learning: A Comprehensive Survey on Adversarial Attacks and Defenses
- 2026SoK: The Pitfalls of Deep Reinforcement Learning for Cybersecurity
- 2026Analyzing Symbolic Properties for DRL Agents in Systems and Networking
- 2025Backdoors in DRL: Four Environments Focusing on In-distribution Triggers
- 2026Probabilistic Robustness-driven Universal Adversarial Perturbations with Explainability against Deep Reinforcement Learning-based Intrusion Detection System
- 2025DRMD: Deep Reinforcement Learning for Malware Detection under Concept Drift