SR2APT: A Detection and Strategic Alert Response Model against Multistage APT Attacks

Figure 9

Number of active defense actions enforced on benign activities by following the DQN response policy from the decision engine of SR2APT and two fixed response policies.