Abstract
The increasing sophistication and dynamism of cyber threats demand security systems that can adapt rapidly to new and evolving attack patterns. Meta-learning, or "learning to learn," offers a promising paradigm for enhancing the adaptability and generalization of machine learning models in cybersecurity contexts. This survey presents a review of recent research on meta-learning approaches applied to cyber threat detection and response, with a particular focus on intrusion detection systems, malware classification, phishing detection, anomaly detection, and adversarial defense. We categorize existing methods into optimization-based, metric-based, and model-based meta-learning, and examine their strengths in few-shot learning, task generalization, and robustness under domain shifts. Furthermore, we identify key challenges, including the lack of standardized benchmarks, computational overhead, explainability limitations, and vulnerability to adversarial attacks. By synthesizing recent advances and outlining open research questions, this paper aims to guide future developments in adaptive, intelligent cybersecurity systems by using meta-learning to enhance the attack detection or even to protect the systems.
Keywords
Meta-Learning Cybersecurity IDS Threat Detection Few-Shot Learning
Abstract
The increasing sophistication and dynamism of cyber threats demand security systems that can adapt rapidly to new and evolving attack patterns. Meta-learning, or "learning to learn," offers a promising paradigm for enhancing the adaptability and generalization of machine learning models in cybersecurity contexts. This survey presents a review of recent research on meta-learning approaches applied to cyber threat detection and response, with a particular focus on intrusion detection systems, malware classification, phishing detection, anomaly detection, and adversarial defense. We categorize existing methods into optimization-based, metric-based, and model-based meta-learning, and examine their strengths in few-shot learning, task generalization, and robustness under domain shifts. Furthermore, we identify key challenges, including the lack of standardized benchmarks, computational overhead, explainability limitations, and vulnerability to adversarial attacks. By synthesizing recent advances and outlining open research questions, this paper aims to guide future developments in adaptive, intelligent cybersecurity systems by using meta-learning to enhance the attack detection or even to protect the systems.
Keywords
Meta-Learning Cybersecurity IDS Threat Detection Few-Shot Learning