Home

How AI and ML are Transforming Cyber Defense

By CIO Applications Europe| Monday, January 28, 2019

The world has become a close-knit place due to the advancing digital transformation. Smart devices and internet have become indispensable for life today. With great power comes great responsibility that is a vulnerability in terms of digitalization. Protecting information and devices from cyber attacks becomes important at this point. Keeping pace with cybersecurity strategies and operations can be a challenge. Cyber threats often take aim at sensitive business data. Defense technology are a standard layer of security, which can assist cybersecurity teams in many stages of defense. The targeted areas where AI will deliver the great potential for cybersecurity are:

Triaging

AI can reduce false positives. It will add rule-based detection systems with the machine learning methods of clustering, pattern matching, association rules, and data visualization. With these AI can quickly filter out relevant alerts for human monitoring.

Threat Hunting

AI can continuously comb through all system data for searching recurrent patterns, anomalous behavior and to present to threat identification. User behavior analytics products use machine learning on user data. Endpoint threat analytics will analyze endpoint data to detect malware. AI can detect application attacks and frauds using Runtime Application Self Protection.

Incident Investigation

AI can investigate what happened to the assets, who the attackers were, what was the past sequence in the attack chain of the asset. AI can also mine past alerts, network and asset information and relevant data to unfold associations and patterns to present to human investigators.

Threat Application

AI can automate the collection of machine-readable data and increase the accuracy and fidelity of this data for each company's specific context. It is also able to collect and apply text analytics and natural language processing o human-readable data with sufficient threat information.

AI, machine learning and human intelligence should work together for better results. Research is still at an early stage, but AI and ML will be increasingly valuable partners in the future combating of cybercrimes.