Multi-Agent Reinforcement Learning in Cybersecurity: From Fundamentals to Applications

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Landolt, Christoph R., Würsch, Christoph, Meier, Roland, Mermoud, Alain, Jang-Jaccard, Julian
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866909623313760256
author Landolt, Christoph R.
Würsch, Christoph
Meier, Roland
Mermoud, Alain
Jang-Jaccard, Julian
author_facet Landolt, Christoph R.
Würsch, Christoph
Meier, Roland
Mermoud, Alain
Jang-Jaccard, Julian
contents Multi-Agent Reinforcement Learning (MARL) has shown great potential as an adaptive solution for addressing modern cybersecurity challenges. MARL enables decentralized, adaptive, and collaborative defense strategies and provides an automated mechanism to combat dynamic, coordinated, and sophisticated threats. This survey investigates the current state of research in MARL applications for automated cyber defense (ACD), focusing on intruder detection and lateral movement containment. Additionally, it examines the role of Autonomous Intelligent Cyber-defense Agents (AICA) and Cyber Gyms in training and validating MARL agents. Finally, the paper outlines existing challenges, such as scalability and adversarial robustness, and proposes future research directions. This also discusses how MARL integrates in AICA to provide adaptive, scalable, and dynamic solutions to counter the increasingly sophisticated landscape of cyber threats. It highlights the transformative potential of MARL in areas like intrusion detection and lateral movement containment, and underscores the value of Cyber Gyms for training and validation of AICA.
format Preprint
id arxiv_https___arxiv_org_abs_2505_19837
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Multi-Agent Reinforcement Learning in Cybersecurity: From Fundamentals to Applications
Landolt, Christoph R.
Würsch, Christoph
Meier, Roland
Mermoud, Alain
Jang-Jaccard, Julian
Multiagent Systems
Computer Science and Game Theory
Machine Learning
Multi-Agent Reinforcement Learning (MARL) has shown great potential as an adaptive solution for addressing modern cybersecurity challenges. MARL enables decentralized, adaptive, and collaborative defense strategies and provides an automated mechanism to combat dynamic, coordinated, and sophisticated threats. This survey investigates the current state of research in MARL applications for automated cyber defense (ACD), focusing on intruder detection and lateral movement containment. Additionally, it examines the role of Autonomous Intelligent Cyber-defense Agents (AICA) and Cyber Gyms in training and validating MARL agents. Finally, the paper outlines existing challenges, such as scalability and adversarial robustness, and proposes future research directions. This also discusses how MARL integrates in AICA to provide adaptive, scalable, and dynamic solutions to counter the increasingly sophisticated landscape of cyber threats. It highlights the transformative potential of MARL in areas like intrusion detection and lateral movement containment, and underscores the value of Cyber Gyms for training and validation of AICA.
title Multi-Agent Reinforcement Learning in Cybersecurity: From Fundamentals to Applications
topic Multiagent Systems
Computer Science and Game Theory
Machine Learning
url https://arxiv.org/abs/2505.19837