tradecraft knowledge and experience
New AI system helps overcome the cyber security skills gap
Enterprises are under constant attack from increasingly sophisticated cyber adversaries, but they are struggling to recruit people with cyber security skills. Automation is the answer that many are turning to and cyber defense specialist DarkLight is launching its latest software which has AI that is trained to think and act like a human analyst. DarkLight 3.0 can implement known strategies from the best defenders and analysts in the form of playbooks to discover and identify attacks made against protected networks, and act to mitigate those threats to combat the most determined adversaries. "Most of the AI cyber defense solutions on the market today are machine learning based, pitting the algorithms of the data scientists against the tradecraft knowledge and experience of a human threat actor," says Shawn Riley, DarkLight's chief data officer. "DarkLight is a different type of AI -- it's an expert system that is designed to emulate the sense-making and decision-making abilities of human experts. Ontologies allow the expert system to understand the meaning of the security data it is observing and AI-driven playbooks encode the tradecraft knowledge and experience of human cyber defense experts. We can effectively pit the threat actor's tradecraft knowledge and experience against the collective knowledge and experience of human cyber defense experts who have encoded their tradecraft knowledge and experience in the AI-driven playbooks. These playbooks are shareable, fully explainable, and can be used for training and education."