Objectives
The overarching goal of ANCILE is to design and evaluate the first Proof-of-Concept of a next-generation SOAR framework capable of significantly improving real-time detection and mitigation of zero-day and APT attacks.
Objective 1 – SOAR Architecture
Innovative reference architecture for next-generation SOAR platforms.
Objective 2 – Probabilistic Detection
AI-driven probabilistic NDR and EDR detection.
Objective 3 – Plan Recognition
Inference of adversarial goals and multi-step strategies.
Objective 4 – Mitigation Planning
Decision-theoretic adversarial mitigation strategies.
Objective 5 – Resilient Infrastructure
Service-oriented, distributed and SDN-enabled infrastructure.
Objective 6 – Interpretable Intelligence
Declarative probabilistic rule bases interpretable by SOC teams.
Objective 7 – Co-Learning
Game-theoretic adversarial learning with cyber ranges.
Objective 8 – Model Evaluation
Rigorous comparison between black-box DNN and interpretable ML approaches.
Objective 9 – Dissemination
Dissemination across scientific and industrial communities.
