Defending Networks with Incomplete Information - A Machine Learning Approach
Explore a machine learning approach to network defense in this Black Hat USA 2013 conference talk. Delve into the challenges of effective security monitoring and incident detection amidst a shortage of skilled professionals. Discover how machine learning can be leveraged to automatically prioritize and classify potential events and attacks. Learn about a free-to-use web service that utilizes OSINT and knowledge of Internet spatial distribution to generate a fluid, constantly updated classifier for pinpointing areas of interest in network traffic logs. Gain insights into correlation rules, various applications of machine learning in security, data gathering considerations, and model intuition including proximity and temporal decay. Understand the process of data collection, feature calculation, and the role of the Hilbert Curve in this innovative approach to defending networks with incomplete information.