Towards an AI-powered Player in Cyber Defence Exercises
METADATA ONLY
Loading...
Author / Producer
Date
2021
Publication Type
Conference Paper
ETH Bibliography
yes
Citations
Altmetric
METADATA ONLY
Data
Rights / License
Abstract
Cyber attacks are becoming increasingly frequent, sophisticated, and stealthy. This makes it harder for cyber defence teams to keep up, forcing them to automate their defence capabilities in order to improve their reactivity and efficiency. Therefore, we propose a fully automated cyber defence framework that no longer needs support from humans to detect and mitigate attacks within a complex infrastructure. We design our framework based on a real-world case-Locked Shields-the world's largest cyber defence exercise. In this exercise, teams have to defend their networked infrastructure against attacks, while maintaining operational services for their users. Our framework architecture connects various cyber sensors with network, device, application, and user actuators through an artificial intelligence (AI)-powered automated team in order to dynamically secure the cyber environment. To the best of our knowledge, our framework is the first attempt towards a fully automated cyber defence team that aims at protecting complex environments from sophisticated attacks.
Permanent link
Publication status
published
Editor
Book title
2021 13th International Conference on Cyber Conflict (CyCon)
Journal / series
Volume
Pages / Article No.
309 - 326
Publisher
IEEE
Event
13th International Conference on Cyber Conflict: Going Viral (CyCon 2021)
Edition / version
Methods
Software
Geographic location
Date collected
Date created
Subject
artificial intelligence; automation; Locked Shields; cyber defence; security
Organisational unit
09477 - Vanbever, Laurent / Vanbever, Laurent