Towards Hierarchical Cyber Defense with Large Language Models: From Planning to Execution

Excerpt

arXiv:2610.00590v1 Announce Type: cross Abstract: An autonomous cyber defender trained with reinforcement learning (RL) is typically tied to the network on which it was trained, limiting its ability to generalize as network scale changes. Hierarchical RL reduces decision complexity by separating strategic targeting from tactical execution, but it does not eliminate this retraining dependence. We investigate whether frozen, zero-shot large language models (LLMs) can provide retraining-free contro