Recent improvements in AI have resulted in advances in many technological and scientific fields including medicine, transportation, communication and data analysis. In these cases, AI techniques have assisted humans in several ways, including, dealing with large amounts of information (i.e., Big Data), recognizing anomalous behavior or trends and making complex decisions. Despite its success in these other areas, AI has yet to have a similar level of impact on cyber security. Cyber security faces many of the same challenges as these other areas, and thus, AI has the potential to have similar impact if applied in appropriate ways.
One key way in which AI can benefit cyber security is by enabling security analysts to focus on relevant signals in large amounts of situational awareness data. AI techniques that can be trained to remove unwanted data or ‘noise’ and improve the analysts’ ability to understand their cyber environment and detect anomalous activity. Another way AI can benefit cyber security is through the use of automated techniques to generate cyber courses of action (COAs) in response to cyber threats. Game theoretic reasoning and agent-based modeling techniques can be used to explore potential attacker-defender interactions and their associated outcomes in order to evaluate candidate solutions and to inform decision makers. The above applications of AI have the potential to impact cyber security in a positive way, bringing automated learning and game theory into the service of improved system resilience. Developing and applying these and other AI capabilities to cyber security problems requires collaboration amongst several different communities including the artificial intelligence, game theory, machine learning and cyber-security communities, as well as the operational and commercial applications communities. This workshop is structured to encourage a lively exchange of ideas between researchers and practitioners in these communities from the academic, public and commercial sectors.
The workshop will focus on research into the use of Artificial Intelligence (AI) for cyber security, including machine learning, game theory, natural language processing, knowledge representation, and automated and assistive reasoning. The workshop will emphasize the application of AI techniques that enable resilience in cyber security systems in operational or mission settings.