Enhancing the Efficiency of a Cybersecurity Operations Center Using Biomimetic Algorithms Empowered by Deep Q-Learning.

• Published in: Biomimetics
• Main Authors: Olivares, Rodrigo, Salinas, Omar, Ravelo, Camilo, Soto, Ricardo, Crawford, Broderick
• Format: Article in Journal/Newspaper
• Language: English
• Published: MDPI 2024
• Subjects: biomimetic optimization algorithm; cyber SOC; deep Q-learning; security information event management; Orca
• Online Access: https://doi.org/10.3390/biomimetics9060307; https://pubmed.ncbi.nlm.nih.gov/38921187; https://www.ncbi.nlm.nih.gov/pmc/articles/PMC11201477/

In the complex and dynamic landscape of cyber threats, organizations require sophisticated strategies for managing Cybersecurity Operations Centers and deploying Security Information and Event Management systems. Our study enhances these strategies by integrating the precision of well-known biomimetic optimization algorithms-namely Particle Swarm Optimization, the Bat Algorithm, the Gray Wolf Optimizer, and the Orca Predator Algorithm-with the adaptability of Deep Q-Learning, a reinforcement learning technique that leverages deep neural networks to teach algorithms optimal actions through trial and error in complex environments. This hybrid methodology targets the efficient allocation and deployment of network intrusion detection sensors while balancing cost-effectiveness with essential network security imperatives. Comprehensive computational tests show that versions enhanced with Deep Q-Learning significantly outperform their native counterparts, especially in complex infrastructures. These results highlight the efficacy of integrating metaheuristics with reinforcement learning to tackle complex optimization challenges, underscoring Deep Q-Learning's potential to boost cybersecurity measures in rapidly evolving threat environments.