Visible to the public Cyber Automated Network Resilience Defensive Approach against Malware Images

TitleCyber Automated Network Resilience Defensive Approach against Malware Images
Publication TypeConference Paper
Year of Publication2022
AuthorsRizwan, Kainat, Ahmad, Mudassar, Habib, Muhammad Asif
Conference Name2022 International Conference on Frontiers of Information Technology (FIT)
KeywordsAutomation, Autonomous cyber defense, CPS, Cyber Automation, cyber resilience, cyber security, Malware, Markov Decision Process, Markov processes, Neural networks, pubcrawl, q-learning, Real-time Systems, recovery, reinforcement learning, resilience, Resiliency, Response, Training
AbstractCyber threats have been a major issue in the cyber security domain. Every hacker follows a series of cyber-attack stages known as cyber kill chain stages. Each stage has its norms and limitations to be deployed. For a decade, researchers have focused on detecting these attacks. Merely watcher tools are not optimal solutions anymore. Everything is becoming autonomous in the computer science field. This leads to the idea of an Autonomous Cyber Resilience Defense algorithm design in this work. Resilience has two aspects: Response and Recovery. Response requires some actions to be performed to mitigate attacks. Recovery is patching the flawed code or back door vulnerability. Both aspects were performed by human assistance in the cybersecurity defense field. This work aims to develop an algorithm based on Reinforcement Learning (RL) with a Convoluted Neural Network (CNN), far nearer to the human learning process for malware images. RL learns through a reward mechanism against every performed attack. Every action has some kind of output that can be classified into positive or negative rewards. To enhance its thinking process Markov Decision Process (MDP) will be mitigated with this RL approach. RL impact and induction measures for malware images were measured and performed to get optimal results. Based on the Malimg Image malware, dataset successful automation actions are received. The proposed work has shown 98% accuracy in the classification, detection, and autonomous resilience actions deployment.
DOI10.1109/FIT57066.2022.00051
Citation Keyrizwan_cyber_2022