darklight
R9B Introduces Artificial Intelligence-Based Expert System to HUNT Operations
R9B's APCs are 24x7x365 security-as-a-service operations centers designed to deliver both managed detection and response services as well as threat hunting to a growing customer set. The ORION HUNT platform enables cyber defenders to stealthily maneuver in a client network to proactively search for adversaries that defeat passive and automated security products. Leveraging DarkLight will enable APC HUNT operations to find correlations and patterns within any size dataset, rapidly evaluating millions of events. The combination of DarkLight and APC operations delivers a new and powerful network security-based data analysis model. Combining the analytics engine with the ORION platform creates a dynamic, targeted collection and response mechanism.
New AI system helps overcome the cyber security skills gap
Enterprises are under constant attack from increasingly sophisticated cyber adversaries, but they are struggling to recruit people with cyber security skills. Automation is the answer that many are turning to and cyber defense specialist DarkLight is launching its latest software which has AI that is trained to think and act like a human analyst. DarkLight 3.0 can implement known strategies from the best defenders and analysts in the form of playbooks to discover and identify attacks made against protected networks, and act to mitigate those threats to combat the most determined adversaries. "Most of the AI cyber defense solutions on the market today are machine learning based, pitting the algorithms of the data scientists against the tradecraft knowledge and experience of a human threat actor," says Shawn Riley, DarkLight's chief data officer. "DarkLight is a different type of AI -- it's an expert system that is designed to emulate the sense-making and decision-making abilities of human experts. Ontologies allow the expert system to understand the meaning of the security data it is observing and AI-driven playbooks encode the tradecraft knowledge and experience of human cyber defense experts. We can effectively pit the threat actor's tradecraft knowledge and experience against the collective knowledge and experience of human cyber defense experts who have encoded their tradecraft knowledge and experience in the AI-driven playbooks. These playbooks are shareable, fully explainable, and can be used for training and education."