Search papers, labs, and topics across Lattice.
This paper introduces a reinforcement learning-based dynamic cyber defense framework utilizing a Deep Q-Network (DQN) to enhance real-time intrusion detection and automated threat mitigation in cloud infrastructures. By training on the CICIDS2017 dataset and validating with the UNSW-NB15 dataset, the DQN model outperformed traditional machine learning techniques, achieving an impressive accuracy of 99.72% and a 99.54% attack mitigation rate. The results underscore the effectiveness of adaptive learning strategies in addressing the complexities of evolving cyber threats in cloud environments.
Reinforcement learning can achieve a staggering 99.72% accuracy in real-time cyber defense, outpacing traditional models in cloud security.
With the increasing complexity of cyber assaults in cloud environments, adaptable security solutions are needed that can support real-time detection and autonomous response. In this paper, we propose a reinforcement learning-based dynamic cyber defense framework. We deploy a Deep Q-Network (DQN) to train effective defensive strategies to counteract the evolving cyberattacks. We leverage the CICIDS2017 dataset for model creation and the UNSW-NB15 dataset for external validation, involving preprocessing of data, feature engineering, and adaptive policy learning. We compare the proposed DQN with decision tree, support vector machine, random forest, XGBoost, and multilayer perceptron models. The proposed DQN achieves an accuracy of 99.72%, a precision of 99.68%, a recall of 99.65%, an F1-score of 99.66%, and an ROC-AUC of 0.999, while the false positive rate is 0.31%, the false negative rate is 0.35%, and the detection latency is 15 ms. The framework achieved 99.54% attack mitigation rate, demonstrating strong adaptive and real-time defensive capabilities. These results demonstrate the potential of reinforcement learning as a powerful and scalable approach for autonomous cybersecurity in modern cloud environments.
