CyberBattleSim: Microsoft's open-source Holodeck in which autonomous attackers, defenders duke it out
(2021/04/09)
- Reference: 1617966371
- News link: https://www.theregister.co.uk/2021/04/09/cyberbattlesim_not_a_poorly_translated/
- Source link:
Microsoft has open-sourced software that pits machine-learning-powered network intruders against automated defenders inside virtual networks.
The tech, dubbed CyberBattleSim by its creators at the Microsoft 365 Defender research team, is a Python-based OpenAI Gym affair, and sets up pretend networks loaded with vulnerabilities and other weaknesses. The attackers learn how to find and exploit flaws to spread through the network, while defenders try to detect malicious activity and mitigate it.
[1]
This is supposed to be a simulation of network movement and infiltration after outer defenses have been breached, and it's hoped this work can be used to study autonomous defense and offense in information security, and whatever else your imagination can come up with.
Microsoft rolls out mask detection to Azure Cognitive Services. And yes, there is a noseAndMouthCovered attribute [2]READ MORE
[3]
"CyberBattleSim provides a way to build a highly abstract simulation of complexity of computer systems, making it possible to frame cybersecurity challenges in the context of reinforcement learning," the team said in a [4]blog post on Friday.
"By sharing this research toolkit broadly, we encourage the community to build on our work and investigate how cyber-agents interact and evolve in simulated environments, and research how high-level abstractions of cyber security concepts help us understand how cyber-agents would behave in actual enterprise networks."
Over the past year, Microsoft has been running the system to model attacks, and now wants to get more feedback.
"With CyberBattleSim, we are just scratching the surface of what we believe is a huge potential for applying reinforcement learning to security," the team said. "We invite researchers and data scientists to build on our experimentation."
[5]
Redmond says the model should be run on Linux – they use Ubuntu – and the code is [6]here on GitHub . As for Windows, you can try it and see if it works. ®
Get our [7]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YHB6QYQmqaqp0A12B4OlPQAAAEI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://www.theregister.com/2021/03/09/acs_mask_detection/
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YHB6QYQmqaqp0A12B4OlPQAAAEI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[4] https://www.microsoft.com/security/blog/2021/04/08/gamifying-machine-learning-for-stronger-security-and-ai-models/
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YHB6QYQmqaqp0A12B4OlPQAAAEI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://github.com/microsoft/CyberBattleSim
[7] https://whitepapers.theregister.com/
The tech, dubbed CyberBattleSim by its creators at the Microsoft 365 Defender research team, is a Python-based OpenAI Gym affair, and sets up pretend networks loaded with vulnerabilities and other weaknesses. The attackers learn how to find and exploit flaws to spread through the network, while defenders try to detect malicious activity and mitigate it.
[1]
This is supposed to be a simulation of network movement and infiltration after outer defenses have been breached, and it's hoped this work can be used to study autonomous defense and offense in information security, and whatever else your imagination can come up with.
Microsoft rolls out mask detection to Azure Cognitive Services. And yes, there is a noseAndMouthCovered attribute [2]READ MORE
[3]
"CyberBattleSim provides a way to build a highly abstract simulation of complexity of computer systems, making it possible to frame cybersecurity challenges in the context of reinforcement learning," the team said in a [4]blog post on Friday.
"By sharing this research toolkit broadly, we encourage the community to build on our work and investigate how cyber-agents interact and evolve in simulated environments, and research how high-level abstractions of cyber security concepts help us understand how cyber-agents would behave in actual enterprise networks."
Over the past year, Microsoft has been running the system to model attacks, and now wants to get more feedback.
"With CyberBattleSim, we are just scratching the surface of what we believe is a huge potential for applying reinforcement learning to security," the team said. "We invite researchers and data scientists to build on our experimentation."
[5]
Redmond says the model should be run on Linux – they use Ubuntu – and the code is [6]here on GitHub . As for Windows, you can try it and see if it works. ®
Get our [7]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YHB6QYQmqaqp0A12B4OlPQAAAEI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://www.theregister.com/2021/03/09/acs_mask_detection/
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YHB6QYQmqaqp0A12B4OlPQAAAEI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[4] https://www.microsoft.com/security/blog/2021/04/08/gamifying-machine-learning-for-stronger-security-and-ai-models/
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YHB6QYQmqaqp0A12B4OlPQAAAEI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://github.com/microsoft/CyberBattleSim
[7] https://whitepapers.theregister.com/