Deep Reinforcement Learning for Autonomous Cyber Defence: A Survey
The rapid increase in the number of cyber-attacks in recent years raises the need for principled methods for defending networks against malicious actors. Deep reinforcement learning (DRL) has emerged as a promising approach for mitigating these attacks. However, while DRL has shown much potential for cyber defence, numerous challenges must be overcome before DRL can be applied to the autonomous cyber defence (ACD) problem at scale. Principled methods are required for environments that confront learners with very high-dimensional state spaces, large multi-discrete action spaces, and adversarial learning. Recent works have reported success in solving these problems individually. There have also been impressive engineering efforts towards solving all three for real-time strategy games. However, applying DRL to the full ACD problem remains an open challenge. Here, we survey the relevant DRL literature and conceptualize an idealised ACD-DRL agent. We provide: i.) A summary of the domain properties that define the ACD problem; ii.) A comprehensive comparison of current ACD environments used for benchmarking DRL approaches; iii.) An overview of state-of-the-art approaches for scaling DRL to domains that confront learners with the curse of dimensionality, and; iv.) A survey and critique of current methods for limiting the exploitability of agents within adversarial settings from the perspective of ACD. We conclude with open research questions that we hope will motivate future directions for researchers and practitioners working on ACD.
Code (0)
등록된 구현이 없습니다.
Tasks
BenchmarkingDeep Reinforcement LearningReal-Time Strategy Gamesreinforcement-learningReinforcement LearningSurveySimilar Papers 제목 키워드 기반
Entity-based Reinforcement Learning for Autonomous Cyber Defence
A significant challenge for autonomous cyber defence is ensuring a defensive agent's ability to generalise across diverse network topologies and configurations. This capability is necessary for agents to remain effective…
Deep Reinforcement Learningreinforcement-learningReinforcement LearningLearning Cyber Defence Tactics from Scratch with Multi-Agent Reinforcement Learning
Recent advancements in deep learning techniques have opened new possibilities for designing solutions for autonomous cyber defence. Teams of intelligent agents in computer network defence roles may reveal promising avenu…
Multi-agent Reinforcement Learningreinforcement-learningLearning to Communicate in Multi-Agent Reinforcement Learning for Autonomous Cyber Defence
Popular methods in cooperative Multi-Agent Reinforcement Learning with partially observable environments typically allow agents to act independently during execution, which may limit the coordinated effect of the trained…
Multi-agent Reinforcement LearningBuilding Better Environments for Autonomous Cyber Defence
In November 2025, the authors ran a workshop on the topic of what makes a good reinforcement learning (RL) environment for autonomous cyber defence (ACD). This paper details the knowledge shared by participants both duri…
Reinforcement LearningAn Empirical Game-Theoretic Analysis of Autonomous Cyber-Defence Agents
The recent rise in increasingly sophisticated cyber-attacks raises the need for robust and resilient autonomous cyber-defence (ACD) agents. Given the variety of cyber-attack tactics, techniques and procedures (TTPs) empl…
Deep Reinforcement Learning