arXiv:2509.06921cs.CRcs.AI2025-09被引 9

神经符号AI融合学习与逻辑,提升网络安全的智能防御能力。

Neuro-Symbolic AI for Cybersecurity: State of the Art, Challenges, and Opportunities

  • 用多智能体结构融合神经网络与符号逻辑,实现深度协同
  • 因果推理使系统能主动防御,比传统检测更有效
  • 适合安全研究者、模型开发者和攻防系统设计者

网络安全需兼具快速模式识别与严谨推理,纯神经或纯符号方法各有所偏。神经符号(NeSy)AI通过统一框架整合学习与逻辑,弥补这一缺口。本系统综述分析了截至2026年4月的103篇相关文献,采用三层分类体系(深度集成、结构化交互、上下文基线)与接地-指令-对齐(G-I-A)分析视角。研究发现:多智能体与结构化集成架构在复杂场景中显著优于单智能体;因果推理实现超越相关性的主动防御;知识引导学习提升数据效率与可解释性。成果覆盖入侵检测、恶意软件分析、漏洞发现与自主渗透测试,集成深度普遍带来性能提升。首次双用途分析显示,调查中的自主进攻系统已以极低成本实现显著零日漏洞利用,重塑威胁格局。但评估标准缺失、计算成本高、人机协作薄弱仍为关键障碍。据此提出优先研究路线图,强调社区基准、负责任开发与防御对齐,指引下一代NeSy网络安全系统发展。

原文摘要 · Abstract (English)

Cybersecurity demands both rapid pattern recognition and deliberative reasoning, yet purely neural or purely symbolic approaches each address only one side of this duality. Neuro-Symbolic (NeSy) AI bridges this gap by integrating learning and logic within a unified framework. This systematic review analyzes 103 publications across the neural-symbolic integration spectrum in cybersecurity through April 2026, organizing them via a three-tier taxonomy -- deep integration, structured interaction, and contextual baselines -- and a Grounding-Instructibility-Alignment (G-I-A) analytical lens. We find that multi-agent and structured-integration architectures across the surveyed spectrum substantially outperform single-agent approaches in complex scenarios, causal reasoning enables proactive defense beyond correlation-based detection, and knowledge-guided learning improves both data efficiency and explainability. These findings span intrusion detection, malware analysis, vulnerability discovery, and autonomous penetration testing, revealing that integration depth often correlates with capability gains across domains. A first-of-its-kind dual-use analysis further shows that autonomous offensive systems in the broader survey corpus are already achieving notable zero-day exploitation success at significantly reduced cost, fundamentally reshaping threat landscapes. However, critical barriers persist: evaluation standardization remains nascent, computational costs constrain deployment, and effective human-AI collaboration is underexplored. We distill these findings into a prioritized research roadmap emphasizing community-driven benchmarks, responsible development practices, and defensive alignment to guide the next generation of NeSy cybersecurity systems.

神经符号网络安全因果推理攻防系统

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。