New AI system helps overcome the cyber security skills gap
Enterprises are under constant attack from increasingly sophisticated cyber adversaries, but they are struggling to recruit people with cyber security skills.
Automation is the answer that many are turning to and cyber defense specialist DarkLight is launching its latest software which has AI that is trained to think and act like a human analyst.
DarkLight 3.0 can implement known strategies from the best defenders and analysts in the form of playbooks to discover and identify attacks made against protected networks, and act to mitigate those threats to combat the most determined adversaries.
"Most of the AI cyber defense solutions on the market today are machine learning based, pitting the algorithms of the data scientists against the tradecraft knowledge and experience of a human threat actor," says Shawn Riley, DarkLight's chief data officer. "DarkLight is a different type of AI -- it's an expert system that is designed to emulate the sense-making and decision-making abilities of human experts. Ontologies allow the expert system to understand the meaning of the security data it is observing and AI-driven playbooks encode the tradecraft knowledge and experience of human cyber defense experts. We can effectively pit the threat actor's tradecraft knowledge and experience against the collective knowledge and experience of human cyber defense experts who have encoded their tradecraft knowledge and experience in the AI-driven playbooks. These playbooks are shareable, fully explainable, and can be used for training and education."
DarkLight applies object-based production methodology to organize what is known about the threats and risks in the cyber ecosystem and enables activity-based intelligence playbooks that focus on behaviors, activities, and transactions to discover unknown unknowns.
It has an object-based, drag and drop interface to support users looking to perform complex tasks like identifying lateral movement, threat hunting and monitoring for insider threats. Regardless of an analyst's skill level, DarkLight automates and enhances their analytic ability, using deductive reasoning to support a data-driven, intelligence-based active defense.
More information and a 30-day free trial is available on the DarkLight website.
Image credit: Wavebreakmedia / depositphotos.com