| Vol-2057 urn:nbn:de:0074-2057-5 Copyright © 2017 for the individual papers by the papers' authors. Copying permitted for private and academic purposes. This volume is published and copyrighted by its editors.

# IST-152 2017
Intelligent Autonomous Agents for Cyber Defence and Resilience

### Proceedings of the NATO IST-152 Workshop on Intelligent Autonomous Agents for Cyber Defence and Resilience
Prague, Czech Republic, October 18-20, 2017.

Edited by

### Michal Pechoucek *
Alexander Kott **

* Czech Technical University in Prague, Zikova 1903/4, 166 36 Prague 6, Czech Republic
** U.S Army Research Laboratory, 2800 Powder Mill Road, Adlephi, Maryland, United States

## Table of Contents

- Preface

### Session 1: Environments of and requirements for Autonomous Cyber Defense Agent (ACDA): complexity of the environments and situations in which ACDA must operate; requirements for ACDA's capabilities.

- Perspectives on Autonomous Intelligent Multi Agent Systems for the Cyber Defense of Military Systems. A case study. 1-14
  Paul Theron
- Cyber Autonomy: Understanding and Mitigating the Risk of a Critical Operational Capability 15-18
  Misty Blowers
- The Internet of Things (IoT): Computational Modeling in Congested and Contested Environments 19-24
  Nandi O. Leslie, Anthony Martone, Michael Weisman
- Federated Cybersecurity Policy Arbitration 25-27
  Gregory Wehner, James Rowell, Joseph Langley, Joseph Mathews

### Session 2: Analysis and characterization of ACDA properties: how should we specify, predict, and assess the properties, traits, limitations, vulnerabilities and effectiveness of ACDA.

- Cyber security: Risk versus Resilience 28-29
  Igor Linkov, Alexander Ganin, Benjamin D. Trump, Kelsey Poinsatte-Jones
- Learning, Simulating, and Predicting Adversary Attack Behaviors for Proactive Cyber Defense 30-34
  Shanchieh Jay Yang, Aunshul Rege, Michael E. Kuhl
- Adversarial Deep Learning Against Intrusion Detection Classifiers 35-48
  Maria Rigaki, Ahmed Elragal
- Internal Architecture for Software Autonomous Intelligent Agents 49-50
  Alessandro Guarino

### Session 3: Understanding and characterizing the adversary: approaches to observing and learning about the adversary, their methods, properties, and limitations.

- Combining Game Theory and Learning for Dynamic Network Defense Strategies 51-53
  Branislav Bošanský, Christopher Kiekintveld
- Industrial Control System: Comprehensive Security Approach 54-78
  Agostino Panico, Lucio Cerullo, Vito Delaurentis, Giuseppina Murino, Francesco Vestito
- Adaptive Autonomous Agent Responses to Targeted Malware Attacks 79-83
  Steven Noel, Arun Lakhotia
- Estimating Parameters of Target's Detection Methods 84-89
  Martin Drašar, Jana Medková

### Session 4: Methods and techniques used by ACDA in order to defeat the adversary, especially agility, moving target defense, camouflage and deception.

- Moving Target Defenses as a Resilience Strategy 90-99
  Nathaniel Evans, Michael Thompson
- Distributed Attenuation Agents for Mitigation of DDoS Attack 100-102
  Hugh Harney, Kevin Andrea, Robert Simon
- Deception and Decoy Autonomous Agent 103-106
  Don Woodard
- Enhancing Cyber Defense with Autonomous Agents Managing Dynamic Cyber Deception 107-112
  Cho-Yu Jason Chiang, Alex Poylisher, Ritu Chadha, Hasan Cam

2018-01-10: submitted by Alexander Kott and Mac MacLeod, metadata incl. bibliographic data published under Creative Commons CC0
2018-01-30: published on CEUR-WS.org |valid HTML5|