Solución autonómica para la gestión integral de la ciberseguridad basado en aprendizaje por refuerzo

Abstract

Cybersecurity has become a race against time. Cybercriminals improve their tools every day and perpetuate a large number of attacks in a very short period of time. This work presents the functional components of an autonomous system for integrated cybersecurity management. It seeks to (I) reduce detection, analysis, and response times to threats and vulnerabilities; (II) automate cybersecurity management processes in Cuban entities; and (III) maintain secure and stable the infrastructure with minimal human intervention. Free software and open-source solutions were used to create the system. Two artificial intelligence models using Python and PyTorch were deployed to make the system autonomous. The development of this system represents a step forward for Cuba toward technological sovereignty in the area of cybersecurity.