Towards a Unified Bayesian Model for Cyber Security

Опубликовано 27 сентября 2018, 19:22

With the realisation that Cyber attacks present a significant risk to an organisation’s reputation, efficiency, and profitability, there has been an increase in the instrumentation of networks; from collecting netflow data at routers, to host-based agents collecting detailed process information. To spot the potential threats within a Cyber environment, a large community of researchers have produced many exciting innovations, aligned with such data. Much of this research has been focused around "data driven" techniques, and does not often fuse data from multiple sources. Moreover, incorporation of threat actors' behaviours and motivations (as specified by Cyber security experts) is often non-existent. In this talk, I will present an initial unified Bayesian model for Cyber security, which allows explicit incorporation of expert knowledge, and provides a natural probabilistic framework for the fusion of multiple data sources.

See more at microsoft.com/en-us/research/v...