Learning Intrusion Response Strategies for OT Systems
This paper presents a formal model of an OT intrusion response use case using the POMDP framework, which includes a realistic model of partial observability that is based on traffic measurements and allows for tractable, learning-based solution methods for automated intrusion response, which are based on PPO.