论文标题
通过网络安全模拟开发最佳因果网络防卫剂
Developing Optimal Causal Cyber-Defence Agents via Cyber Security Simulation
论文作者
论文摘要
在本文中，我们通过将新颖的网络安全模拟器与（因果）通过优化的（因果）决策统一统一来探讨网络安全辩护。特别注意最近发表的方法：动态因果贝叶斯优化（DCBO）。我们建议，当提供模拟网络的视图以及红色代理如何在该网络中传播的因果模型时，DCBO可以充当蓝色代理。为了研究DCBO如何对主机节点执行最佳干预措施，以降低红色代理引起的入侵成本。通过此，我们证明了一个完整的网络模拟系统，我们用来生成DCBO的观察数据，并提供数值定量结果，从而为未来的工作奠定了基础。
In this paper we explore cyber security defence, through the unification of a novel cyber security simulator with models for (causal) decision-making through optimisation. Particular attention is paid to a recently published approach: dynamic causal Bayesian optimisation (DCBO). We propose that DCBO can act as a blue agent when provided with a view of a simulated network and a causal model of how a red agent spreads within that network. To investigate how DCBO can perform optimal interventions on host nodes, in order to reduce the cost of intrusions caused by the red agent. Through this we demonstrate a complete cyber-simulation system, which we use to generate observational data for DCBO and provide numerical quantitative results which lay the foundations for future work in this space.
