Lessons learned in designing a cyber reinforcement learning competition

Tyler Cody; Emma Meno; David Jones; Tugba Erpek; Peter A Beling

doi:10.1117/12.3010920

7 June 2024 Lessons learned in designing a cyber reinforcement learning competition

Tyler Cody, Emma Meno, David Jones, Tugba Erpek, Peter A Beling

Proceedings Volume 13051, Artificial Intelligence and Machine Learning for Multi-Domain Operations Applications VI; 130511B (2024) https://doi.org/10.1117/12.3010920
Event: SPIE Defense + Commercial Sensing, 2024, National Harbor, Maryland, United States

Abstract

This paper details the lessons learned from designing a specialized competition focused on network attack simulation, specifically emphasizing lateral movement in networks. Our experience in planning the competition reveals several critical design principles that could guide the development of future competitions. Among these principles are the need for a carefully curated simulation environment that mimics real-world network behaviors and vulnerabilities without neglecting the limitations of current capabilities, the necessity for defining a clear scoring system that accurately reflects the effectiveness of different strategies while allowing for interpretability and style, and the importance of ensuring that the competition has clear roles for participants with varied levels of expertise in both cybersecurity and reinforcement learning. This paper offers lessons learned for those interested in organizing similar competitions or developing benchmarks in the area of cyber reinforcement learning. We strongly advocate for the use of network attack simulation competitions as an effective means to accelerate research, foster community collaboration, and identify emergent strategies and techniques. By outlining our design process, the challenges faced, and the solutions implemented, we provide actionable insights to assist practitioners, researchers, and government sponsors.

Conference Presentation

(2024) Published by SPIE. Downloading of the abstract is permitted for personal use only.

Citation Download Citation

Tyler Cody, Emma Meno, David Jones, Tugba Erpek, and Peter A Beling "Lessons learned in designing a cyber reinforcement learning competition", Proc. SPIE 13051, Artificial Intelligence and Machine Learning for Multi-Domain Operations Applications VI, 130511B (7 June 2024); https://doi.org/10.1117/12.3010920

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available