SOURCE-LINKED INTELLIGENCE

A Cyber Range Evaluation of Autonomous Network Incident Response Agents

arXiv · AI, language, vision and robotics · article · Sep 15, 2026 · UTC

We test the performance of agents for automated network intrusion response in a cyber range intended for human operator training. The range implements an emulated networking environment with a variable network topology, red-team emulation and simulated user agents. The goal of the defensive agents is to prevent hosts in the network from being accessed by the red-team agent, while minimizing the availability costs induced from defensive measures. Alerts are generated using a SIEM platform and mapped to a data modeling language used by the agents. We test a combination of heuristic agents and po

Read original source ↗ Open in workspace

recordType

paper

region

Global