Friday, May 16, 2025
LBNN
  • Business
  • Markets
  • Politics
  • Crypto
  • Finance
  • Energy
  • Technology
  • Taxes
  • Creator Economy
  • Wealth Management
  • Documentaries
No Result
View All Result
LBNN

Reinforcement learning pentesting agent training in realistic network environments

Simon Osuji by Simon Osuji
October 18, 2024
in Artificial Intelligence
0
Reinforcement learning pentesting agent training in realistic network environments
0
SHARES
2
VIEWS
Share on FacebookShare on Twitter


Towards a safe society 5.0: Reinforcement learning pentesting agent training in realistic network environments
Overview of the PenGym framework architecture. Credit: Razvan Beuran from JAIST.

Ensuring the security of network systems and infrastructure is a critical aspect of cybersecurity. Penetration testing (pentesting) is an effective method for evaluating the network security posture.

Related posts

We Hand-Picked the 24 Best Deals from the 2025 REI Anniversary Sale

We Hand-Picked the 24 Best Deals from the 2025 REI Anniversary Sale

May 16, 2025
Congress pushes GPS tracking for every exported semiconductor

Congress pushes GPS tracking for every exported semiconductor

May 16, 2025

In recent years, researchers have aimed to develop efficient approaches for conducting the pentesting procedure automatically to address the issues in traditional manual and time-consuming methods. One approach is to use reinforcement learning (RL) techniques, which have been applied to create automated agents that mimic the actions of human pentesters but have enhanced speed, scale, and precision.

Various simulation environments have been introduced as the main method to train these RL agents. However, the heavy reliance on predefined constants and probabilistic values for agent actions and environment states leads to potential inaccuracies in replicating real-world behavior due to factors that were not modeled, thus decreasing agent accuracy and performance. In addition, the simulated network may not accurately represent the configuration and topology of an actual network.

To address this “reality gap,” a team of researchers led by Associate Professor Razvan Beuran, along with his doctoral student Huynh Phuong Thanh Nguyen at the Japan Advanced Institute of Science and Technology (JAIST), and researchers at KDDI Research, has designed and implemented PenGym, an effective and reliable realistic training framework for RL pentesting agents that was developed as part of a joint project with KDDI Research.

Towards a safe society 5.0: Reinforcement learning pentesting agent training in realistic network environments
Example of a realistic network environment used for agent training in PenGym. Credit: Razvan Beuran from JAIST.

PenGym enables RL agents to execute actual actions on realistic hosts in network environments. For this purpose, the framework contains an Action/State Module that implements a set of real pentesting actions for the interaction between the RL agents and the training environment. Moreover, the training environment is based on the cyber range technology used for human cybersecurity training and is created automatically according to several pentesting scenarios.

Several optimization techniques were implemented to enhance the time execution performance of PenGym. As a result, their framework eliminates the need for action modeling, resulting in a more accurate representation of network and security dynamics compared to simulation-based environments. Their study was published in Computers & Security.

The approach of using a real network environment that makes possible the execution of actual pentesting actions, as employed in this research, yields promising results compared to simulated environments. In particular, their experiments demonstrated the advantages and effectiveness of using PenGym as a realistic training environment for RL pentesting agents. Thus, the PenGym-trained agents showed a superior pentesting performance in real networks compared to simulation-trained agents.

Based on the experiment results the researchers obtained, they consider that their research could lead to changes in various network-related research areas, potentially replacing the traditional approach of creating complex logical models to simulate network environments with more realistic methods. Furthermore, realistic training environments can be applied to other research areas.

One important example is automated cyber defense using RL agents, which can be used to enhance the protection mechanisms of real network infrastructure and contribute to the trustworthiness of Society 5.0. To support the potential activities of other researchers in this field, they released PenGym as open source on GitHub.

More information:
Huynh Phuong Thanh Nguyen et al, PenGym: Realistic training environment for reinforcement learning pentesting agents, Computers & Security (2024). DOI: 10.1016/j.cose.2024.104140

Provided by
Japan Advanced Institute of Science and Technology

Citation:
Towards a safe Society 5.0: Reinforcement learning pentesting agent training in realistic network environments (2024, October 18)
retrieved 18 October 2024
from https://techxplore.com/news/2024-10-safe-society-pentesting-agent-realistic.html

This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
part may be reproduced without the written permission. The content is provided for information purposes only.





Source link

Previous Post

Liquid South Africa | Uganda’s digital transformation

Next Post

Binance executive’s trial rescheduled in Nigeria

Next Post
Binance executive’s trial rescheduled in Nigeria

Binance executive's trial rescheduled in Nigeria

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

RECOMMENDED NEWS

How Many Tokens You Need To Make $5M, $10M If SHIB Hits $0.00789?

How Many Tokens You Need To Make $5M, $10M If SHIB Hits $0.00789?

1 year ago
The Bitcoin Masterclasses #7 with Dr. Craig Wright: Keeping data accurate by integrating alternative structures

The Bitcoin Masterclasses #7 with Dr. Craig Wright: Keeping data accurate by integrating alternative structures

2 years ago
New AI learning model improves stance detection performance and efficiency

New AI learning model improves stance detection performance and efficiency

8 months ago
We are targeting 20,000 megawatts of electricity by 2026- FG

We are targeting 20,000 megawatts of electricity by 2026- FG

2 years ago

POPULAR NEWS

  • Ghana to build three oil refineries, five petrochemical plants in energy sector overhaul

    Ghana to build three oil refineries, five petrochemical plants in energy sector overhaul

    0 shares
    Share 0 Tweet 0
  • When Will SHIB Reach $1? Here’s What ChatGPT Says

    0 shares
    Share 0 Tweet 0
  • Matthew Slater, son of Jackson State great, happy to see HBCUs back at the forefront

    0 shares
    Share 0 Tweet 0
  • Dolly Varden Focuses on Adding Ounces the Remainder of 2023

    0 shares
    Share 0 Tweet 0
  • US Dollar Might Fall To 96-97 Range in March 2024

    0 shares
    Share 0 Tweet 0
  • Privacy Policy
  • Contact

© 2023 LBNN - All rights reserved.

No Result
View All Result
  • Home
  • Business
  • Politics
  • Markets
  • Crypto
  • Economics
    • Manufacturing
    • Real Estate
    • Infrastructure
  • Finance
  • Energy
  • Creator Economy
  • Wealth Management
  • Taxes
  • Telecoms
  • Military & Defense
  • Careers
  • Technology
  • Artificial Intelligence
  • Investigative journalism
  • Art & Culture
  • Documentaries
  • Quizzes
    • Enneagram quiz
  • Newsletters
    • LBNN Newsletter
    • Divergent Capitalist

© 2023 LBNN - All rights reserved.