Guardado en:
Detalles Bibliográficos
Autores principales: Hammar, Kim, Dhir, Neil, Stadler, Rolf
Formato: Preprint
Publicado: 2024
Materias:
Acceso en línea:https://arxiv.org/abs/2407.11070
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866917811804176384
author Hammar, Kim
Dhir, Neil
Stadler, Rolf
author_facet Hammar, Kim
Dhir, Neil
Stadler, Rolf
contents The CAGE-2 challenge is considered a standard benchmark to compare methods for autonomous cyber defense. Current state-of-the-art methods evaluated against this benchmark are based on model-free (offline) reinforcement learning, which does not provide provably optimal defender strategies. We address this limitation and present a formal (causal) model of CAGE-2 together with a method that produces a provably optimal defender strategy, which we call Causal Partially Observable Monte-Carlo Planning (C-POMCP). It has two key properties. First, it incorporates the causal structure of the target system, i.e., the causal relationships among the system variables. This structure allows for a significant reduction of the search space of defender strategies. Second, it is an online method that updates the defender strategy at each time step via tree search. Evaluations against the CAGE-2 benchmark show that C-POMCP achieves state-of-the-art performance with respect to effectiveness and is two orders of magnitude more efficient in computing time than the closest competitor method.
format Preprint
id arxiv_https___arxiv_org_abs_2407_11070
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Optimal Defender Strategies for CAGE-2 using Causal Modeling and Tree Search
Hammar, Kim
Dhir, Neil
Stadler, Rolf
Machine Learning
Artificial Intelligence
Cryptography and Security
The CAGE-2 challenge is considered a standard benchmark to compare methods for autonomous cyber defense. Current state-of-the-art methods evaluated against this benchmark are based on model-free (offline) reinforcement learning, which does not provide provably optimal defender strategies. We address this limitation and present a formal (causal) model of CAGE-2 together with a method that produces a provably optimal defender strategy, which we call Causal Partially Observable Monte-Carlo Planning (C-POMCP). It has two key properties. First, it incorporates the causal structure of the target system, i.e., the causal relationships among the system variables. This structure allows for a significant reduction of the search space of defender strategies. Second, it is an online method that updates the defender strategy at each time step via tree search. Evaluations against the CAGE-2 benchmark show that C-POMCP achieves state-of-the-art performance with respect to effectiveness and is two orders of magnitude more efficient in computing time than the closest competitor method.
title Optimal Defender Strategies for CAGE-2 using Causal Modeling and Tree Search
topic Machine Learning
Artificial Intelligence
Cryptography and Security
url https://arxiv.org/abs/2407.11070