Multi-Agent AI Systems for Security Automation

Abstract: Considering the increasing popularity of MAAI solutions for providing a promising alternative to automating the process of security operations in complex network environments. The paper presents a scalable multi- agent solution that involves autonomous intelligent agents working together to discover threats, recognize security gaps, take decisions, and respond to security attacks. Unlike other solutions, which involve conventional and centralized security frameworks [9–13], our multi-agent-based approach makes use of several agents, providing more flexibility due to the possibility of running tasks in parallel, adapting quickly by learning agents from experience, and making the whole system less vulnerable to advanced cyberattacks. Our multi-agent system uses agents with unique features and works using the communication layer, in which agents exchange information about detected threats and optimize their actions to achieve the best results in always-on protection. The experimental prototype is tested for its efficiency in detecting DDoS attack, phishing or malware intrusions. The research results revealed high levels of efficiency demonstrated through high detection rates, low response latency, and fewer false positives. As far as MAAI systems go, this work proves a considerable potential for automation and scalability.

Keywords: Multi-Agent Systems; Cybersecurity Automation; Artificial Intelligence; Intrusion Detection System (IDS); Distributed Security; Autonomous Agents; Threat Detection; Security Orchestration Network Security Intelligent Systems.