首页/论文/2004.04647

arXiv 2004.046472020-04-07cs.CRcs.AIcs.LG

Adversarial Genetic Programming for Cyber Security: A Rising Application Domain Where GP Matters

MIT CSAIL（麻省理工学院计算机科学与人工智能实验室）

Una-May O'Reilly, Jamal Toutouh, Marcos Pertierra, Daniel Prado Sanchez, Dennis Garcia, Anthony Erb Luogo, Jonathan Kelly, Erik Hemberg

DOI：: 10.1007/s10710-020-09389-y

阅读 PDF ↗

arXiv 页面 ↗HTML 原文 ↗

英文摘要相关论文

英文摘要：

Cyber security adversaries and engagements are ubiquitous and ceaseless. We delineate Adversarial Genetic Programming for Cyber Security, a research topic that, by means of genetic programming (GP), replicates and studies the behavior of cyber adversaries and the dynamics of their engagements. Adversarial Genetic Programming for Cyber Security encompasses extant and immediate research efforts in a vital problem domain, arguably occupying a position at the frontier where GP matters. Additionally, it prompts research questions around evolving complex behavior by expressing different abstractions with GP and opportunities to reconnect to the Machine Learning, Artificial Life, Agent-Based Modeling and Cyber Security communities. We present a framework called RIVALS which supports the study of network security arms races. Its goal is to elucidate the dynamics of cyber networks under attack by computationally modeling and simulating them.

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

阅读原文

阅读 PDF ↗

arXiv 页面 ↗HTML 原文 ↗

本文内容

英文摘要相关论文

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

继续探索

相关论文

Automating Cyber Threat Hunting Using NLP, Automated Query Generation, and Genetic Perturbation

Perspecta Labs, Inc.（Perspecta实验室）；MIT CSAIL（麻省理工学院计算机科学与人工智能实验室）

Scaling the cyber hunt problem poses several key technical challenges. Detecting and characterizing cyber threats at scale in large enterprise networks is hard because of the vast quantity and complexity of the data that must be analyzed as adversaries deploy varied and evolving tactics to accomplish their goals. There is a great need to automate all aspects, and, indeed, the workflow of cyber hunting. AI offers many ways to support this. We have developed the WILEE system that automates cyber threat hunting by translating high-level threat descriptions into many possible concrete implementati…

2021-04-23cs.AIcs.CR

浴火重生：自主AI如何解锁网络安全挑战

Rising From the Ashes: How Agentic AI is Unblocking Challenges in Cybersecurity

Stevens Institute of Technology（斯特文斯理工学院）；University of Wisconsin-Madison（威斯康星大学麦迪逊分校）；CDL AsTra, Faculty of Computer Science, University of Vienna（维也纳大学计算机科学学院AsTra计算语言与安全技术中心）；Microsoft Security Response Center (MSRC)（微软安全响应中心）；KASTEL Security Research Labs, Karlsruhe Institute of Technology (KIT)（卡尔斯鲁厄理工学院KASTEL安全研究实验室）

本文探讨自主AI通过直接处理自然语言或代码来缓解安全防御中劳动密集型瓶颈的潜力，并通过16个案例研究（包括供应链分析）展示其对防御者的益处。

2026-06-23cs.CR

A systematic literature review on cyber threat hunting

Since the term "Cyber threat hunting" was introduced in 2016, there have been a rising trend of proactive defensive measure to create more cyber security. This research will look into peer reviewed literature on the subject of cyber threat hunting. Our study shows an increase in the field with methods of machine learning.\\ Keywords: Cyber threat, Cyber security, threat hunting , security system, data driven, Intel, analytic driven, TTPs

2022-12-10cs.CR

全球网络空间法治、和平、安全与可演进性的技术解决方案——解决IP网络的三大基因缺陷

A technical solution for the rule of law, peace, security, and evolvability of global cyberspace -- solve the three genetic defects of IP network

针对IP网络权力集中、缺乏内生安全、协议僵化三大缺陷，提出基于区块链的共治多标识网络CoG-MIN，兼具安全、兼容IP、支持多标识演进等特性，为全球网络空间治理提供技术方案。

2024-12-14cs.CRcs.NI

CyberLearning: Effectiveness Analysis of Machine Learning Security Modeling to Detect Cyber-Anomalies and Multi-Attacks

Chittagong University of Engineering & Technology（吉大港工程与技术大学）；Swinburne University of Technology（斯威本科技大学）

Detecting cyber-anomalies and attacks are becoming a rising concern these days in the domain of cybersecurity. The knowledge of artificial intelligence, particularly, the machine learning techniques can be used to tackle these issues. However, the effectiveness of a learning-based security model may vary depending on the security features and the data characteristics. In this paper, we present "CyberLearning", a machine learning-based cybersecurity modeling with correlated-feature selection, and a comprehensive empirical analysis on the effectiveness of various machine learning based security …

2021-03-28cs.CRcs.LG

Ransomware: A Rising Threat of new age Digital Extortion

This article attempts to discover the surreptitious features of ransomware and to address it in information systems security research. It intends to elicit attention with regard to ransomware, a newly emerged cyber threat using such encryption technology as RSA, and to help both academic researchers and IT practitioners understand the technological characteristics of ransomware, along with its severity analysis. As ransomware infections continue to rise and attacks employing refined algorithm become increasingly sophisticated, data protection faces serious challenges. The article discusses fut…

2016-03-26cs.CRcs.CY

更多相关论文收起更多论文

Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS

Howard University（霍华德大学）

Cyber Physical Systems (CPS) are characterized by their ability to integrate the physical and information or cyber worlds. Their deployment in critical infrastructure have demonstrated a potential to transform the world. However, harnessing this potential is limited by their critical nature and the far reaching effects of cyber attacks on human, infrastructure and the environment. An attraction for cyber concerns in CPS rises from the process of sending information from sensors to actuators over the wireless communication medium, thereby widening the attack surface. Traditionally, CPS security…

2021-02-14cs.AIcs.CRcs.LG

Approaching the Automation of Cyber Security Testing of Connected Vehicles

The advancing digitalization of vehicles and automotive systems bears many advantages for creating and enhancing comfort and safety-related systems ranging from drive-by-wire, inclusion of advanced displays, entertainment systems up to sophisticated driving assistance and autonomous driving. It, however, also contains the inherent risk of being used for purposes that are not intended for, raging from small non-authorized customizations to the possibility of full-scale cyberattacks that affect several vehicles to whole fleets and vital systems such as steering and engine control. To prevent suc…

2019-11-15cs.CR

Strategic Evolution of Adversaries Against Temporal Platform Diversity Active Cyber Defenses

Adversarial dynamics are a critical facet within the cyber security domain, in which there exists a co-evolution between attackers and defenders in any given threat scenario. While defenders leverage capabilities to minimize the potential impact of an attack, the adversary is simultaneously developing countermeasures to the observed defenses. In this study, we develop a set of tools to model the adaptive strategy formulation of an intelligent actor against an active cyber defensive system. We encode strategies as binary chromosomes representing finite state machines that evolve according to Ho…

2014-07-31cs.CRcs.GT

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

Singapore University of Technology and Design（新加坡科技设计大学）；Zhejiang University（浙江大学）；Singapore Management University（新加坡管理大学）

The threats faced by cyber-physical systems (CPSs) in critical infrastructure have motivated research into a multitude of attack detection mechanisms, including anomaly detectors based on neural network models. The effectiveness of anomaly detectors can be assessed by subjecting them to test suites of attacks, but less consideration has been given to adversarial attackers that craft noise specifically designed to deceive them. While successfully applied in domains such as images and audio, adversarial attacks are much harder to implement in CPSs due to the presence of other built-in defence me…

2021-05-22cs.AIcs.CRcs.LG

23andMe数据泄露事件：分析凭据填充攻击、安全漏洞与缓解策略

The 23andMe Data Breach: Analyzing Credential Stuffing Attacks, Security Vulnerabilities, and Mitigation Strategies

本文分析了2023年23andMe因凭据填充导致约550万用户基因数据泄露的攻击方法、影响及缓解策略，强调多因素认证和企业数据保护责任的重要性。

2025-02-06cs.CR

通过异常流量检测保障物联网通信安全：遗传算法与集成方法的协同作用

Securing IoT Communications via Anomaly Traffic Detection: Synergy of Genetic Algorithm and Ensemble Method

针对物联网网络易受安全威胁的问题，提出结合遗传算法与集成方法的三阶段异常检测框架，经实验验证准确率达98%，能有效提升物联网网络安全性。

2025-10-21cs.CR

TwinPot：面向网络安全的智慧海港数字孪生辅助蜜罐

TwinPot: Digital Twin-assisted Honeypot for Cyber-Secure Smart Seaports

Istanbul Technical University（伊斯坦布尔理工大学）；Edinburgh Napier University（爱丁堡龙比亚大学）

本文提出TwinPot数字孪生辅助蜜罐与智能攻击检测机制，结合MANSIM构建智慧海港攻击数据集，实现同时检测内部和外部攻击。

2023-10-25cs.AIcs.CRcs.NI

MESA安全模型2.0：缓解隐蔽数据外泄的动态框架

The MESA Security Model 2.0: A Dynamic Framework for Mitigating Stealth Data Exfiltration

针对传统纵深防御难以应对隐蔽数据外泄等复杂网络威胁的问题，研究提出MESA 2.0安全模型，从静态边界预防转向动态防御，以快速检测、即时响应和持续韧性降低入侵后果，助力企业适配 evolving 网络威胁环境。

2024-05-17cs.CR

Communication Layer Security in Smart Farming: A Survey on Wireless Technologies

Human population growth has driven rising demand for food that has, in turn, imposed huge impacts on the environment. In an effort to reconcile our need to produce more sustenance while also protecting the ecosystems of the world, farming is becoming more reliant on smart tools and communication technologies. Developing a smart farming framework allows farmers to make more efficient use of inputs, thus protecting water quality and biodiversity habitat. Internet of Things (IoT), which has revolutionized every sphere of the economy, is being applied to agriculture by connecting on-farm devices a…

2022-03-04cs.CRcs.CY

"Please help share!": Security and Privacy Advice on Twitter during the 2022 Russian Invasion of Ukraine

The Russian Invasion of Ukraine in early 2022 resulted in a rapidly changing (cyber) threat environment. This changing environment incentivized the sharing of security advice on social media, both for the Ukrainian population, as well as against Russian cyber attacks at large. Previous research found a significant influence of online security advice on end users. We collected 8,920 tweets posted after the Russian Invasion of Ukraine and examined 1,228 in detail, including qualitatively coding 232 relevant tweets and 140 linked documents for security and privacy advice. We identified 221 unique…

2022-08-24cs.CR

用于增强物联网安全性的机器学习辅助入侵检测

Machine Learning-Assisted Intrusion Detection for Enhancing Internet of Things Security

University of New Mexico（新墨西哥大学）；Florida International University（佛罗里达国际大学）；Florida Atlantic University（佛罗里达大西洋大学）；University of Washington（华盛顿大学）；Islamic Azad University（伊斯兰阿扎德大学）

本文调研了物联网安全领域基于机器学习的入侵检测策略最新研究，梳理相关研究并分类，指出现有研究空白与框架局限，为未来研究提供参考。

2024-10-06cs.CRcs.LG

保护去中心化的未来：常见区块链攻击及其对策的探索

Protecting the Decentralized Future: An Exploration of Common Blockchain Attacks and their Countermeasures

本研究全面分析常见区块链攻击及其对策，评估不同解决方案的有效性，并强调根据具体应用需求定制防御措施，为区块链安全研究提供重要参考。

2023-06-20cs.CRcs.CYcs.DB