by Joseph Zadeh
This talk outlines an approach to modeling human behavior in network traffic with the goal of automatically labeling events that have security context. Large-scale defensive programs now have the opportunity to invest resources in next generation distributed architectures and software stacks to build custom security solutions to augment existing SIEM and point solution driven escalations. We describe ways to create such a scalable framework of distributed forensic artificial intelligences to hunt for evil and to minimize time spent on repeatable remediation and evidence collection processes. This type of next-gen cybersecurity analytics engine can add immediate value through alarm reduction and attribution of attacks to threat actors and campaigns over time.
The goal of building such a framework is to reduce time to detection and to provide automated ways to help incident response and daily reporting and escalations. The amount of data present in corporate SIEM's and IT warehouses allows for security teams to build the central nervous system of the Security Operations Center (SOC). One of the more complex tasks in designing such a next generation defensive system to is leverage machine learning to build models that are dynamic and intelligent enough to adapt to changing threats (labels suffer from concept drift) and to catch threats that have never been observed before (no ground truth). We describe ways to roadmap such cybersecurity analytics and ways to calculate the best return on investment given existing coverage and needs mapped to the threat surface.
From False Positives To Actionable Analysis blackhat 2015 |
| 6 Likes | 6 Dislikes |
| 895 views views | 117K followers |
| People & Blogs | Upload TimePublished on 29 Dec 2015 |
Related keywords
- infosec news
- information security manager
- blackhat asia 2019
- blackhat 2019
- infosec twitter
- blackhat 2018
- black hat seo technique
- blackhat europe
- blackhat badger sekiro
- black hat x reader
- black hat cartoon
- black hat x dr flug
- cyber securityとは
- blackhat conference 2019
- cyber security cloud
- black hat full movie
- blackhat badger
- blackhat forum
- information security foundation 勉強
- infosec rotkreuz
- cyber security framework
- information security policy template
- infosecurity utrecht
- infosec ups system
- cyber security news
- cyber security act
- infosecurity
- blackhat full movie
- infosec blog
- black hat badger
- information security foundation 参考書
- information security management system
- cyber security conference
- black hat seo
- cyber security pro
- black hat movie
- blackhat imdb
- infosec podcast
- black hat cast
- cyber security pro 新しいネットワークが検出されました
- cyber security cloud managed rules
- cyber security measures
- information security governance
- infosec global
- infosecurity europe 2020
- infosec health
- infosec magazine
- information security 日本語
- infosec 19
- black hat anime
- information security foundation
- infosecurity magazine
- cyber security tokyo
- black hat meaning
- black hatch
- information security definition
- information security pdf
- infosec europe 2019
- cyber security market
- infosec institute
- infosec 2019 london
- information security foundation 難易度
- black hatch gamefowl
- cyber security management system
- information security certifications
- blackhat film
- cyber security pro アンインストール
- information security specialist
- cyber security 意味
- cyber security analyst
- information security policy
- black hat usa 2019
- information security forum
- information security news
- infosec conferences
- information security officer
- infosekta
- cyber security japan
- blackhat trailer
- information security analyst
- cyber security university
- black hat hacker
- black hat forum
- cyber security company
- black hat hacking
- black hat villainous
- blackhat conference
- information security foundation based on iso/iec 27001
- blackhat usa
- cyber security report
- blackhatworld
- black hat x demencia
- information security management
- blackhat cast
- black hat 2019
- infosec reactions
Không có nhận xét nào:
Đăng nhận xét