Название: Autonomous Intelligent Cyber Defense Agent (AICA): A Comprehensive Guide
Автор: Alexander Kott
Издательство: Springer
Серия: Advances in Information Security
Год: 2023
Страниц: 468
Язык: английский
Формат: pdf (true), epub
Размер: 37.1 MB

This book offers a structured overview and a comprehensive guide to the emerging field of Autonomous Intelligent Cyber Defense Agents (AICA). The book discusses the current technical issues in autonomous cyber defense and offers information on practical design approaches. The material is presented in a way that is accessible to non-specialists, with tutorial information provided in the initial chapters and as needed throughout the book. The reader is provided with clear and comprehensive background and reference material for each aspect of AICA.

This book is based on the premise that the future of cyber-defense and cyber resilience will depend largely on autonomous, Artificially Intelligent (AI) agents. Such an agent will reside on a system that includes one or more computing devices and be responsible for defending the system from cyber compromises. If a compromise occurs, the agent will then be responsible for response and recovery of the system, usually autonomously. To refer to such a class of agents, we use the term Autonomous Intelligent Cyber-defense Agent (AICA). In this book, we explore how AICA will be designed and how it will operate.

Experience shows that even well-protected computing systems are likely to be successfully attacked and infiltrated by hostile malware. There is no reason to believe this will be any different in the future. Today, when a compromise occurs, response, mitigation and recovery depend largely on human cyber-defenders. This approach is becoming increasingly untenable. With an ever-growing number of computerized, automated and even autonomous systems in our society, human-based cyber-defense must be replaced by autonomous cyber-defenders such as AICA.

Similarly to the current generation of cyber-defense tools, AICA will detect malicious signatures, patterns and anomalies; it will also classify, characterize and diagnose what it observes within its environment, traffic and host. However, unlike the current generation of cyber-defense tools, AICA is a doer, not merely a watcher. It will have to plan and then decisively execute responses to attacks and perform recovery actions.