Active cyber-defence employs anticipatory techniques to proactively mitigate cyber threats. Among such techniques, the most relevant one consists in the continuous updating of cyber-threat intelligence. In this respect, there is a trade-off between the cost of intelligence assets and the benefits derived from their exploitation. While the optimisation of this trade-off has recently been tested with conventional reinforcement learning, this paper investigates the suitability of active inference-based agents for addressing the same challenge. A novel mathematical formulation for Active Inference overfully-observable Markov Decision Processes is provided in this paper, and four different off-policy bootstrapped neural implementations are given. Empirical evaluation highlights that deep active inference agents not only achieve a competitive performance with conventional deep reinforcement learning systems, but also that, crucially, some formulations of epistemic gain can indeed foster exploration and provide a discernible performance boost in terms of return maximisation. This work contributes to understanding the empirical boundaries of Active Inference’s unique mechanisms in complex, real-world-inspired environments, informing future architectural design for deep active inference agents.

ACID: beta-testing active inference for active cyber-defence

Cevallos-Moreno J. F.;Rizzardi Alessandra;Sicari Sabrina
;
Coen-Porisini Alberto
2026-01-01

Abstract

Active cyber-defence employs anticipatory techniques to proactively mitigate cyber threats. Among such techniques, the most relevant one consists in the continuous updating of cyber-threat intelligence. In this respect, there is a trade-off between the cost of intelligence assets and the benefits derived from their exploitation. While the optimisation of this trade-off has recently been tested with conventional reinforcement learning, this paper investigates the suitability of active inference-based agents for addressing the same challenge. A novel mathematical formulation for Active Inference overfully-observable Markov Decision Processes is provided in this paper, and four different off-policy bootstrapped neural implementations are given. Empirical evaluation highlights that deep active inference agents not only achieve a competitive performance with conventional deep reinforcement learning systems, but also that, crucially, some formulations of epistemic gain can indeed foster exploration and provide a discernible performance boost in terms of return maximisation. This work contributes to understanding the empirical boundaries of Active Inference’s unique mechanisms in complex, real-world-inspired environments, informing future architectural design for deep active inference agents.
2026
2026
https://link.springer.com/article/10.1007/s40860-026-00278-2
Active inference, Deep learning, Network intrusion detection
Cevallos-Moreno, J. F.; Rizzardi, Alessandra; Sicari, Sabrina Sophy; Coen Porisini, Alberto
File in questo prodotto:
Non ci sono file associati a questo prodotto.

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11383/2219331
 Attenzione

L'Ateneo sottopone a validazione solo i file PDF allegati

Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus ND
  • ???jsp.display-item.citation.isi??? ND
social impact