SoK: A Comparison of Autonomous Penetration Testing Agents

Publikation: Beitrag in Buch/Bericht/KonferenzbandKonferenzbeitragBegutachtung

Abstract

In the still growing field of cyber security, machine learning methods have largely been employed for detection tasks. Only a small portion revolves around offensive capabilities. Through the rise of Deep Reinforcement Learning, agents have also emerged with the goal of actively assessing the security of systems by the means of penetration testing. Thus learning the usage of different tools to emulate humans. In this paper we present an overview, and comparison of different autonomous penetration testing agents found within the literature. Various agents have been proposed, making use of distinct methods, but several factors such as modelling of the environment and scenarios, different algorithms, and the difference in chosen methods themselves, make it difficult to draw conclusions on the current state and performance of those agents. This comparison also lets us identify research challenges that present a major limiting factor, such as handling large action spaces, partial observability, defining the right reward structure, and learning in a real-world scenario.

OriginalspracheEnglisch
TitelARES 2024 - 19th International Conference on Availability, Reliability and Security, Proceedings
Herausgeber (Verlag)Association for Computing Machinery
ISBN (elektronisch)9798400717185
DOIs
PublikationsstatusVeröffentlicht - 30 Juli 2024
Veranstaltung19th International Conference on Availability, Reliability and Security, ARES 2024 - Vienna, Österreich
Dauer: 30 Juli 20242 Aug. 2024

Publikationsreihe

NameACM International Conference Proceeding Series

Konferenz

Konferenz19th International Conference on Availability, Reliability and Security, ARES 2024
Land/GebietÖsterreich
OrtVienna
Zeitraum30/07/242/08/24

Fingerprint

Untersuchen Sie die Forschungsthemen von „SoK: A Comparison of Autonomous Penetration Testing Agents“. Zusammen bilden sie einen einzigartigen Fingerprint.

Dieses zitieren