Harnessing Artificial Intelligence To Build an Army of Virtual Analysts
An anonymous reader writes: PatternEx, a startup that gathered a team of AI researcher from MIT CSAIL as well as security and distributed systems experts, is poised to shake up things in the user and entity behavior analytics market. Their goal was to make a system capable of mimicking the knowledge and intuition of human security analysts so that attacks can be detected in real time. The platform can go through millions of events per day and can make an increasingly better evaluation of whether they are anomalous, malicious or benign.
So, when they publish their findings will someone modify it to make an army of virtual hackers?
Because that would be awesome.
Lost at C:>. Found at C.
Their goal was to make a system capable of mimicking the knowledge and intuition of human security analysts so that attacks can be detected in real time.
That boils down to letting the expensive firewalls do their job and checking the log files later on. Meanwhile, back to minesweeper.
There's still a great advantage for the human security analyst. The human may not be as fast or as infallible. One may not be as infallible as the AI when things are going smoothly. However, the human will still need to make sure the AI is making sense. Someone needs to make sure the traffic being flagged is consistent with actual traffic. The AI can itself be subverted via code. The AI can have a subtle bug that makes it stop making sense in some obscure edge case that isn't covered well in testing. The human cannot be so easily fooled or subverted. It's going to be a team effort. It's just that it'll be the AI and a handful of humans doing what a much bigger team of humans used to do.