| Titre : |
Agentic AI in the dark : AI-driven offense and defense against attacks originating from local TOR networks |
| Type de document : |
document multimédia |
| Auteurs : |
Roumaissa Imane Nakhlati, Auteur ; Messaoud Babaghayou, Directeur de thèse |
| Editeur : |
Laghouat : Université Amar Telidji - Département d'informatique |
| Année de publication : |
2026 |
| Importance : |
111 p. |
| Accompagnement : |
1 disque optique numérique (CD-ROM) |
| Note générale : |
Option : Networks, systems and distributed applications |
| Langues : |
Anglais (eng) |
| Mots-clés : |
Cybersecurity Autonomous agents Docker TOR anonymization Intrusion detection Network security Data sovereignty AI-driven agents |
| Résumé : |
DockSec AI is a fully local, autonomous cybersecurity framework for offensive and defensive assessments within a controlled TOR-anonymized laboratory environment. The system deploys two specialized AI agents—a Red Agent (offensive) and a Blue Agent (defensive)—that share a locally hosted language model to execute adaptive attack strategies and perform AI-driven threat detection. The Red Agent autonomously performs reconnaissance, exploit selection, credential harvesting, and post-exploitation through a private Docker-based TOR network, ensuring complete traffic anonymization. The Blue Agent monitors network traffic, classifies alerts using AI reasoning, applies TOR-aware risk scoring, and maintains persistent memory through vector-based storage. Experimental results demonstrate the framework’s effectiveness : the Red Agent successfully executes adaptive attacks with credential auto-trigger and
replanning, while the Blue Agent achieves significant detection rate improvements over rule-based expert baselines while reducing false positives. All operations run locally on standard hardware using a small quantized model, proving that effective AI-driven security is accessible without cloud dependency or specialized infrastructure. DockSec AI ensures data sovereignty, privacy protection, and compliance through on-site Docker containerization, enabling rapid deployment, portability, and cost-efficient scalability for security research and autonomous assessments. |
| note de thèses : |
Mémoire de master en informatique |
Agentic AI in the dark : AI-driven offense and defense against attacks originating from local TOR networks [document multimédia] / Roumaissa Imane Nakhlati, Auteur ; Messaoud Babaghayou, Directeur de thèse . - Laghouat : Université Amar Telidji - Département d'informatique, 2026 . - 111 p. + 1 disque optique numérique (CD-ROM). Option : Networks, systems and distributed applications Langues : Anglais ( eng)
| Mots-clés : |
Cybersecurity Autonomous agents Docker TOR anonymization Intrusion detection Network security Data sovereignty AI-driven agents |
| Résumé : |
DockSec AI is a fully local, autonomous cybersecurity framework for offensive and defensive assessments within a controlled TOR-anonymized laboratory environment. The system deploys two specialized AI agents—a Red Agent (offensive) and a Blue Agent (defensive)—that share a locally hosted language model to execute adaptive attack strategies and perform AI-driven threat detection. The Red Agent autonomously performs reconnaissance, exploit selection, credential harvesting, and post-exploitation through a private Docker-based TOR network, ensuring complete traffic anonymization. The Blue Agent monitors network traffic, classifies alerts using AI reasoning, applies TOR-aware risk scoring, and maintains persistent memory through vector-based storage. Experimental results demonstrate the framework’s effectiveness : the Red Agent successfully executes adaptive attacks with credential auto-trigger and
replanning, while the Blue Agent achieves significant detection rate improvements over rule-based expert baselines while reducing false positives. All operations run locally on standard hardware using a small quantized model, proving that effective AI-driven security is accessible without cloud dependency or specialized infrastructure. DockSec AI ensures data sovereignty, privacy protection, and compliance through on-site Docker containerization, enabling rapid deployment, portability, and cost-efficient scalability for security research and autonomous assessments. |
| note de thèses : |
Mémoire de master en informatique |
|  |