Using AI To Fight Cyberthreats


Millennials know exactly what they want and expectations are high - very high. They are empowered

SparkCognition, working with Carnegie Mellon and IBM's Watson, aims to provide cyber-security researchers with better threat data using predictive models powered by machine learning.

SparkCognition, a company that applies machine learning to predictive analytics, has begun working with Carnegie Mellon University's Software Engineering Institute (SEI) to develop an automated threat identification and remediation system that works in conjunction with IBM's Watson.

As part of the arrangement, SparkCognition says it plans to train researchers at SEI's CERT Division how to use IBM Watson to record and index vulnerabilities in the Common Weakness Enumeration (CWE) list and CERT Secure Coding Rules. By doing so, the researchers will make vulnerability information more accessible and more useful to those focused on protecting critical national infrastructure.

To fight automated attacks, organizations need automated defenses in order to help security professionals separate signal from noise.

"Cybersecurity has evolved to a point that without AI, it's really hard to keep up with all the attacks today," said CEO Amir Husain in a phone interview. "The purpose of this partnership is to combine our collective capabilities, and to be able to predict attacks even when the specific threat is not something that's been seen before."

Through automated modeling and machine learning, which the company uses outside the security industry to anticipate wind turbine failure, SparkCognition can predict the behavior of unknown software and flag it for analysis. Husain said these sort of models can help people make better decisions by presenting them with better information.

"AI will find things for me to pay attention to," said Husain, stressing that companies should not seek to completely automate their defenses out of concern for liability, "for the same reason the military does not want AI to pull the trigger."

It's an approach that Husain argues is superior to traditional antivirus tools like blacklists and signatures.

"The rate at which these attacks are being created is so rapid no blacklist can keep up," said Husain.

SparkCognition's SparkSecure automates the process of analyzing inbound and outbound server log data to aid in the detection of malicious software, bot traffic, and suspect IP addresses. It looks at how software is built and the resources it uses before the code gets run.

[See 10 Hot Security Technologies Enterprises Need Now.]

Husain said his company's system has flagged malware that was missed by more than 60 antivirus engines. When analyzed by a security researcher, the flagged software turned out to be a common decompression utility that had been injected with a previously unseen -- and thus undetectable by signature -- strain of malware.

The role of IBM Watson in this ecosystem is to provide advice, available through natural language queries, to those responsible for dealing with threats. Having been fed massive amounts of security-related information, like device manuals and vulnerability data, Watson acts as a AI help desk.

Husain contends his company's technology is ideal for organizations that have a security information and event management (SIEM) system in place that either is being underutilized or is overloading administrators with alerts.

More than half of all website traffic comes from bots, many of which are trying to scrape data, scan for vulnerabilities, or facilitate identity theft, said Husain. AI can make sense of that vast amount of data more readily than a person.

0 Comment

Leave a Reply

Captcha image


  • 5300c769af79e

    Report: Samsung to Implement "Focus" Communication Hub Into Galaxy Note 6

    According to the latest from SamMobile, Samsung will look to implement a feature called Samsung Focus into the Galaxy Note 6, a communication hub of sorts, similar to BlackBerry Hub.Claimed by SamMobile, Focus will focus on email, calendar events, handle contacts, and memos.
  • 5300c769af79e

    Fact-Checking Social Content

    In "Facebook Shouldn't Fact-Check," Jessica Lessin argues that it's not Facebook's job to fact-check the growing flood of fake news coming at us through its portal and social media more generally.That possibility is made probable when readers discover that Facebook delivers content at variance with truth, when it is expected to deliver all truth, all the time.
  • 5300c769af79e

    Nintendo Will Launch Super Mario Run for Android in the Future

    One of the more exciting announcements during the iPhone 7 event was the introduction of Super Mario Run from Nintendo.To describe the upcoming game as plainly as possible, it looks like a horizontal Temple Run, but Mario.
  • 5300c769af79e

    Pre-Order $129 'Google Wifi' Router Replacement

    6, the wireless router is being offered as a single $129 device, or in a $299 bundle of three for use as a "mesh" system around your home.Keep in mind that a long, narrow home or particularly thick walls may require additional Wifi points.