{"id":"https://openalex.org/W4390189854","doi":"https://doi.org/10.1109/milcom58377.2023.10356321","title":"Autonomous Cyber Defense Agents for NATO: Threat Analysis, Design, and Experimentation","display_name":"Autonomous Cyber Defense Agents for NATO: Threat Analysis, Design, and Experimentation","publication_year":2023,"publication_date":"2023-10-30","ids":{"openalex":"https://openalex.org/W4390189854","doi":"https://doi.org/10.1109/milcom58377.2023.10356321"},"language":"en","primary_location":{"id":"doi:10.1109/milcom58377.2023.10356321","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom58377.2023.10356321","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2023 - 2023 IEEE Military Communications Conference (MILCOM)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5021565297","display_name":"Alexander Velazquez","orcid":"https://orcid.org/0000-0001-5951-6288"},"institutions":[{"id":"https://openalex.org/I1288214837","display_name":"United States Naval Research Laboratory","ror":"https://ror.org/04d23a975","country_code":"US","type":"facility","lineage":["https://openalex.org/I1288214837","https://openalex.org/I1330347796","https://openalex.org/I175003984","https://openalex.org/I3130687028"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Alexander Velazquez","raw_affiliation_strings":["U.S. Naval Research Laboratory,Information Technology Division,Washington,DC,USA","Information Technology Division, U.S. Naval Research Laboratory, Washington, DC, USA"],"affiliations":[{"raw_affiliation_string":"U.S. Naval Research Laboratory,Information Technology Division,Washington,DC,USA","institution_ids":["https://openalex.org/I1288214837"]},{"raw_affiliation_string":"Information Technology Division, U.S. Naval Research Laboratory, Washington, DC, USA","institution_ids":["https://openalex.org/I1288214837"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091404899","display_name":"Roberto Rigolin F. Lopes","orcid":"https://orcid.org/0000-0002-0114-5610"},"institutions":[{"id":"https://openalex.org/I4210123028","display_name":"Thales (Germany)","ror":"https://ror.org/031xjr712","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210123028","https://openalex.org/I4210140930"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Roberto Rigolin F. Lopes","raw_affiliation_strings":["Thales Deutschland,Secure Communications & Information (SIX),Ditzingen,Germany"],"affiliations":[{"raw_affiliation_string":"Thales Deutschland,Secure Communications & Information (SIX),Ditzingen,Germany","institution_ids":["https://openalex.org/I4210123028"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037722869","display_name":"Adrien B\u00e9cue","orcid":"https://orcid.org/0000-0002-9328-9581"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Adrien B\u00e9cue","raw_affiliation_strings":["THALES SIX GTS,Gennevilliers,France","THALES SIX GTS, Gennevilliers, France"],"affiliations":[{"raw_affiliation_string":"THALES SIX GTS,Gennevilliers,France","institution_ids":[]},{"raw_affiliation_string":"THALES SIX GTS, Gennevilliers, France","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044449306","display_name":"Johannes F. Loevenich","orcid":"https://orcid.org/0000-0002-8149-1600"},"institutions":[{"id":"https://openalex.org/I4210123028","display_name":"Thales (Germany)","ror":"https://ror.org/031xjr712","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210123028","https://openalex.org/I4210140930"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Johannes F. Loevenich","raw_affiliation_strings":["Thales Deutschland,Secure Communications & Information (SIX),Ditzingen,Germany"],"affiliations":[{"raw_affiliation_string":"Thales Deutschland,Secure Communications & Information (SIX),Ditzingen,Germany","institution_ids":["https://openalex.org/I4210123028"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037683366","display_name":"Paulo H. L. Rettore","orcid":"https://orcid.org/0000-0002-5491-7274"},"institutions":[{"id":"https://openalex.org/I4210166245","display_name":"Fraunhofer Institute for Communication, Information Processing and Ergonomics","ror":"https://ror.org/05nn0gw40","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210166245","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Paulo H. L. Rettore","raw_affiliation_strings":["Fraunhofer FKIE,Department of Communication Systems,Bonn,Germany","Department of Communication Systems, Fraunhofer FKIE, Bonn, Germany"],"affiliations":[{"raw_affiliation_string":"Fraunhofer FKIE,Department of Communication Systems,Bonn,Germany","institution_ids":["https://openalex.org/I4210166245"]},{"raw_affiliation_string":"Department of Communication Systems, Fraunhofer FKIE, Bonn, Germany","institution_ids":["https://openalex.org/I4210166245"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011301282","display_name":"Konrad Wrona","orcid":"https://orcid.org/0000-0002-3362-9820"},"institutions":[{"id":"https://openalex.org/I4210165920","display_name":"European Network for Cyber Security","ror":"https://ror.org/0584wbt59","country_code":"NL","type":"nonprofit","lineage":["https://openalex.org/I4210165920"]},{"id":"https://openalex.org/I2800249161","display_name":"Military University of Technology in Warsaw","ror":"https://ror.org/05fct5h31","country_code":"PL","type":"education","lineage":["https://openalex.org/I2800249161"]}],"countries":["NL","PL"],"is_corresponding":false,"raw_author_name":"Konrad Wrona","raw_affiliation_strings":["Military University of Technology,Warsaw,Poland","Military University of Technology, Warsaw, Poland","NATO Cyber Security Centre, The Hague, The Netherlands"],"affiliations":[{"raw_affiliation_string":"Military University of Technology,Warsaw,Poland","institution_ids":["https://openalex.org/I2800249161"]},{"raw_affiliation_string":"Military University of Technology, Warsaw, Poland","institution_ids":["https://openalex.org/I2800249161"]},{"raw_affiliation_string":"NATO Cyber Security Centre, The Hague, The Netherlands","institution_ids":["https://openalex.org/I4210165920"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5021565297"],"corresponding_institution_ids":["https://openalex.org/I1288214837"],"apc_list":null,"apc_paid":null,"fwci":2.4109,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.89816063,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"207","last_page":"212"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11896","display_name":"Opportunistic and Delay-Tolerant Networks","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7646883130073547},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.624546229839325},{"id":"https://openalex.org/keywords/core","display_name":"Core (optical fiber)","score":0.5670922994613647},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.5404177308082581},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.5015788078308105},{"id":"https://openalex.org/keywords/cyber-threats","display_name":"Cyber threats","score":0.4893473982810974},{"id":"https://openalex.org/keywords/autonomous-agent","display_name":"Autonomous agent","score":0.41468381881713867},{"id":"https://openalex.org/keywords/systems-engineering","display_name":"Systems engineering","score":0.26877686381340027},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.252086877822876},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.18725648522377014},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.09007662534713745}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7646883130073547},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.624546229839325},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.5670922994613647},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5404177308082581},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5015788078308105},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.4893473982810974},{"id":"https://openalex.org/C13687954","wikidata":"https://www.wikidata.org/wiki/Q4826847","display_name":"Autonomous agent","level":2,"score":0.41468381881713867},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.26877686381340027},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.252086877822876},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.18725648522377014},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.09007662534713745},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/milcom58377.2023.10356321","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom58377.2023.10356321","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2023 - 2023 IEEE Military Communications Conference (MILCOM)","raw_type":"proceedings-article"},{"id":"pmh:oai:publica.fraunhofer.de:publica/488177","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/488177","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference paper"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W1970554353","https://openalex.org/W2927692314","https://openalex.org/W3091214985","https://openalex.org/W3102360395","https://openalex.org/W3176185107","https://openalex.org/W3215869833","https://openalex.org/W4284890209","https://openalex.org/W4286851029","https://openalex.org/W4312384107","https://openalex.org/W4312876584","https://openalex.org/W4367181612","https://openalex.org/W4379141219","https://openalex.org/W4380740979","https://openalex.org/W4386883412","https://openalex.org/W4386883603"],"related_works":["https://openalex.org/W4244478748","https://openalex.org/W4223488648","https://openalex.org/W2134969820","https://openalex.org/W2251605416","https://openalex.org/W2560439919","https://openalex.org/W4389340727","https://openalex.org/W3150465815","https://openalex.org/W1997222214","https://openalex.org/W2802581102","https://openalex.org/W4205786897"],"abstract_inverted_index":{"This":[0],"paper":[1],"discusses":[2],"the":[3,32,42,56,76,83,120,150,165],"design":[4,121],"and":[5,50,53,58,70,73,78,86,90,110,122,130,139,161],"implementation":[6],"of":[7,23,31,36,46,92,99,114,152],"Autonomous":[8],"Cyber":[9],"Defense":[10],"(ACD)":[11],"agents":[12,26,127],"for":[13,124,128,136],"Protected":[14],"Core":[15],"Networking":[16],"(PCN).":[17],"Our":[18,95,141],"solution":[19],"includes":[20],"two":[21,104],"types":[22],"specialized,":[24],"complementary":[25],"placed":[27],"in":[28,55,75],"different":[29],"parts":[30],"network.":[33],"One":[34],"type":[35],"agent,":[37],"ACD-Core,":[38],"is":[39,64,97,117,143],"deployed":[40,65],"within":[41,66],"protected":[43],"core":[44],"segment":[45],"a":[47,67,133],"particular":[48],"nation":[49],"can":[51,71],"monitor":[52,72],"act":[54,74],"physical":[57],"IP":[59],"layers.":[60,80],"The":[61,112],"other,":[62],"ACD-CC,":[63],"colored":[68],"cloud":[69],"transport":[77],"application":[79],"We":[81],"analyze":[82],"threat":[84],"landscape":[85],"identify":[87],"possible":[88],"uses":[89],"misuses":[91],"these":[93],"agents.":[94],"work":[96],"part":[98],"an":[100],"ongoing":[101],"collaboration":[102,116],"between":[103],"NATO":[105],"research":[106],"task":[107],"groups,":[108],"IST-162":[109],"IST-196.":[111],"goal":[113],"this":[115],"to":[118,131,148],"detail":[119],"roadmap":[123],"implementing":[125],"ACD":[126,145],"PCN":[129],"create":[132],"virtual":[134],"lab":[135],"related":[137],"experimentation":[138],"validation.":[140],"vision":[142],"that":[144],"will":[146],"contribute":[147],"improving":[149],"cybersecurity":[151],"military":[153],"networks,":[154],"protecting":[155],"them":[156],"against":[157],"evolving":[158],"cyber":[159],"threats,":[160],"ensuring":[162],"connectivity":[163],"at":[164],"tactical":[166],"edge.":[167]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":7}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}