Adaptive Cyber Attack Projection through Context-Driven Model Selection: Combining Graph Attention Networks and Reinforcement Learning

Informations

Revue / Journal

2025 5th Intelligent Cybersecurity Conference (ICSC)

Éditeur

IEEE

DOI

10.1109/ICSC65596.2025.11140325

Résumé

Predicting the next phases of an ongoing cyberattack is critical for proactive cybersecurity, enabling defenders to anticipate and mitigate threats effectively. This paper presents a context-aware meta-model framework designed to dynamically select the most suitable prediction model for projecting the next phase of an attack. Depending on real-time situational parameters, the meta-model determines whether to employ a Graph Attention Network (GAT) or a Deep Q-Network (DQN). The GAT model captures complex, graph-based relationships in attack patterns, while the DQN model excels in sequential decision-making for evolving attack scenarios. Experimental evaluations using the CTU-13 dataset demonstrate the effectiveness of this approach: GAT achieves 99.20% accuracy, and DQN achieves 100% in predicting the second phase of an attack based on an alert set representing the first phase. These results …

Lien externe