Главная
Study mode:
on
1
Introduction
2
Agenda
3
Motivation
4
Calibration
5
Pvalue calibration
6
Model uncertainty
7
What is calibration
8
MetaLearning
9
Bayesian Approach
10
Monitoring
11
Statespace Models
12
Filtering
13
Modeling
14
Probability distribution
15
Wrap up
Description:
Explore a methodology for measuring probabilistic calibration and dynamically updating scores in anomaly detection systems. Delve into the challenges faced by Microsoft Defender Advanced Threat Protection in monitoring billions of anomaly detectors across diverse data sources. Learn about adaptive mixtures of functional inflated beta-binomial models and their application in identifying and updating scores for cyber indicators of attack. Discover how an automated statistical diagnostics system can infer optimal weighting of anomaly scores through probabilistic inference, addressing the scalability issues of manual detector review. Cover topics such as p-value calibration, model uncertainty, meta-learning, Bayesian approaches, state-space models, filtering, and probability distribution modeling in this comprehensive 1-hour 26-minute talk by Cole Sodja from Microsoft Defender ATP, presented at the Alan Turing Institute.

Dynamic Meta-Learning for Anomaly Detection - Cole Sodja, Microsoft Defender ATP

Alan Turing Institute
Add to list