Congratulations to the group of Information Security students (Faculty of Computer Networks and Communications) and the InSecLab research group for having their research paper on Active Cyber-attack Defense based on Deep Reinforcement Learning accepted at

24/04/2024 - 01:03

The 13th Conference on Information Technology and Its Applications (CITA) will be hosted by the Vietnam-Korea University of Information and Communication Technology (VKU), a member of the University of Danang, with support from other research and training institutions under the ASEAN Creative Innovation Research Association (ACIR) and the Vietnam ICT Association of Faculties-Institutes-School-Universities (FISU Vietnam). The conference will take place on July 19-20, 2024, in Da Nang City and Hoi An City, Vietnam.

Paper Title: "An Adaptive Cyber Deception Approach for Active Cyber-attack Defense Method based on Deep Reinforcement Learning"

Student Contributors:

Nguyen Chi Toan - Information Security, High-Quality Program 2019
Nguyen Hoang Hieu - Information Security, High-Quality Program 2019
Cao Thi Bich Phuong - Information Security, High-Quality Program 2019

Supervisors: MSc. Phan The Duy, MSc. Do Hoang Hien

Abstract: "The diverse landscape of network models, including Software Defined Networking (SDN), Cloud Computing (C2), and Internet of Things (IoT), is evolving to meet the demands of flexibility and performance. However, these environments face numerous security challenges due to cyber-attack complexity. Traditional defense mechanisms are no longer effective against modern attacks. Therefore, Defensive Deception (DD) is proposed as an active defense approach for deceiving attackers. Despite the optimized resource deployment of both Machine Learning (ML) and Deep Learning (DL), they necessitate the usage of pre-existing datasets that have been labeled. Our paper combines Deep Reinforcement Learning (DRL) and SDN technology to establish a novel strategic deception deployment method. This combination creates a powerful security solution that generates deceptive targets and resources to attract attackers, as a result, it provides improved visibility, threat detection, response capabilities, and threat intelligence. Our experiments are implemented on a simulated SDN-based network. The experimental results show that our approach gives significant effectiveness for deception resource allocation compared to random strategies."

Conference Link: https://cita.vku.udn.vn/