Accession Number:



Initial Reference Architecture of an Intelligent Autonomous Agent for Cyber Defense

Descriptive Note:

Technical Report,09 Sep 2016,09 Feb 2018

Corporate Author:

U.S. Army Research Laboratory Army Research Laboratory United States

Report Date:


Pagination or Media Count:



This report describes an initial reference architecture for intelligent software agents performing active, largely autonomous cyber defense actions on military networks of computing and communicating devices. The report is produced by the North Atlantic Treaty Organization NATO Research Task Group RTG IST-152 Intelligent Autonomous Agents for Cyber Defense and Resilience. In a conflict with a technically sophisticated adversary, NATO military tactical networks will operate in a heavily contested battlefield. Enemy software cyber agents malware will infiltrate friendly networks and attack friendly command, control, communications, computers, intelligence, surveillance, and reconnaissance and computerized weapon systems. To fight them, NATO needs artificial cyber hunters intelligent, autonomous, mobile agents specialized in active cyber defense. With this in mind, in 2016, NATO initiated RTG IST-152. Its objective is to help accelerate development and transition to practice of such software agents by producing a reference architecture and technical roadmap. This report presents the concept and architecture of an Autonomous Intelligent Cyber Defense Agent AICA. We describe the rationale of the AICA concept, explain the methodology and purpose that drive the definition of the AICA Reference Architecture, and review some of the main features and challenges of the AICA.

Subject Categories:

  • Computer Systems Management and Standards

Distribution Statement: