AutoBnB: Multi-Agent Incident Response with Large Language Models

Incident response (IR) is a critical aspect of cyberse-curity, requiring rapid decision-making and coordinated efforts to address cyberattacks effectively. Leveraging large language models (LLMs) as intelligent agents offers a novel approach to enhancing collaboration and efficiency in IR scenarios. This paper explores the application of LLM-based multi-agent col-laboration using the Backdoors & Breaches (B&B) framework, a tabletop game designed for cybersecurity training. We simulate realistic IR dynamics through various team structures, including centralized, decentralized, and hybrid configurations. By ana-lyzing agent interactions and performance across these setups, we provide insights into optimizing multi-agent collaboration for incident response. Our findings highlight the potential of LLMs to enhance decision-making, improve adaptability, and streamline IR processes, paving the way for more effective and coordinated responses to cyber threats.

Authors

Institutions

Publication Details

Published
2025-04-24
DOI
https://doi.org/10.1109/isdfs65363.2025.11012055
Citations
6
Primary Topic
Topic Modeling
Type
article
Field-Weighted Citation Impact
14.89
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

AutoBnB: Multi-Agent Incident Response with Large Language Models

Zefang Liu
6 citations
Topic Modeling
14.89
article

AutoBnB: Multi-Agent Incident Response with Large Language Models

Zefang Liu
article en
6 citations

Abstract

Incident response (IR) is a critical aspect of cyberse-curity, requiring rapid decision-making and coordinated efforts to address cyberattacks effectively. Leveraging large language models (LLMs) as intelligent agents offers a novel approach to enhancing collaboration and efficiency in IR scenarios. This paper explores the application of LLM-based multi-agent col-laboration using the Backdoors & Breaches (B&B) framework, a tabletop game designed for cybersecurity training. We simulate realistic IR dynamics through various team structures, including centralized, decentralized, and hybrid configurations. By ana-lyzing agent interactions and performance across these setups, we provide insights into optimizing multi-agent collaboration for incident response. Our findings highlight the potential of LLMs to enhance decision-making, improve adaptability, and streamline IR processes, paving the way for more effective and coordinated responses to cyber threats.

Georgia Institute of Technology (US)
Openalex Percentile: Top 1%
Topic Modeling
14.89
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

AutoBnB: Multi-Agent Incident Response with Large Language Models — Zefang Liu · (2025) | TGRS Research Map | TGRS