AIMLCZG567: AI & ML

Techniques for Cyber Security

BITS Pilani Jagdish Prasad
Pilani Campus WILP
 BITS Pilani
Pilani Campus

Session : 01
Title : Introduction to Cyber Security
Agenda
• Introduction to Course: AI&ML Techniques for Cyber Security
• Objective
• Content & Text books
• Structure & Schedule
• Lecture Plan & Evaluation
• Introduction to Cyber Security
• Introduction to Cyber Security, Cyber Security Challenges, Types of Attacks
• Techniques for addressing the challenges
• Block chain
• Cryptographic techniques
• Access control techniques
• Mathematical approach
• Soft computing techniques
• AI and ML techniques
• Review of Cybersecurity Solutions
BITS Pilani, Pilani Campus
Introduction to Course

BITS Pilani, Pilani Campus

Course Objective

No Objective(s)
CO1 To introduce the basic concepts and techniques of Artificial Intelligence
and Machine learning.
CO2 To apply Machine Learning techniques to Cyber Security.
CO3 To analyse the performance of applied Machine Learning models.

BITS Pilani, Pilani Campus

Course Content

1. Introduction to Cyber Security (2 hrs)

2. Introduction to Artificial Intelligence (2 hrs)
3. Basics for Machine Learning (4 hrs)
4. Supervised Learning for Misuse/Signature Detection (2 hrs)
5. Machine Learning for Anomaly Detection (2 hrs)
6. Machine Learning for Malware detection and classification (4 hrs)
7. Network Intrusion detection and classification (4 hrs)
8. Detection and categorization of domain names generated by
Domain name generation algorithms (2 hrs)
9. Profiling Network Traffic (2 hrs)
[Link] Machine Learning for Malware detection (2 hrs)

BITS Pilani, Pilani Campus

Text Books

Ref Book Name

T1 Data Mining and Machine Learning in Cybersecurity, Sumeet Dua and Xian Du,
CRC Press, 2011
T2 Artificial Intelligence & Cybersecurity For Dummies®, IBM Limited Edition, 2018
by John Wiley & Sons, Inc
T3 Introduction to artificial intelligence for security professionals, The Cylance Data
Science Team. Irvine, CA : The Cylance Press, 2017
T4 Hands-On Machine Learning for Cybersecurity, Soma Halder and Sinan Ozdemir,
Packt publishing

BITS Pilani, Pilani Campus

Reference Books

Ref Description
R1 William Stallings & Lawrie Brown, Computer Security: Principles and Practice,
4th Edition, Pearson, 2018
R2 Tom M. Mitchell, Machine Learning, The McGraw-Hill Companies, Inc. Indian
Edition 1997
R3 Tom M. Mitchell, Machine Learning, The McGraw-Hill Companies, Inc. Indian
Edition 1997

BITS Pilani, Pilani Campus

Course Structure & Schedule

• 16 on-line lectures (2 hours each)

• Schedule
• Semester start (first lecture) : 27 Jul 24
• Last lecture : 23 Nov, 24
• Mid Sem Exam : 20, 21, 22 Sep, 24
• Mid Sem Exam Makeup : 04, 05, 06 Oct, 24
• Comprehensive Exam : 29, 30 Nov / 01 Dec, 24
• Comprehensive Exam Makeup : 06, 07, 08 Dec, 24

BITS Pilani, Pilani Campus

 Lecture Plan
Lecture # Topic Covered Date
LO1 Introduction to Cyber Security 27-Jul
LO2 Introduction to Artificial Intelligence b 03-Aug
LO3 Basics to Machine Learning-I 10-Aug
LO4 Basics of Machine Learning-II 17-Aug
L05 Supervised Learning for Misuse/Signature Detection 24-Aug
L06 Machine Learning for Anomaly Detection-I 31-Aug
L07 Machine Learning for Anomaly Detection-II 07-Sep
L08 Revision of session 1 to 7 14-Sep
L09 Machine Learning for Malware detection and classification 28-Sep
L10 Malware detection and classification 12-Oct
L11 Intrusion detection-I 19-Oct
L12 Intrusion detection-II 26-Oct
L13 Detection and categorization of domain names generated by Domain name 02-Nov
generation algorithms
L14 Profiling Network Traffic 09-Nov
L15 Adversarial Machine Learning for Malware detection 16-Nov
L16 Revision of 9 to 15 23-Nov

BITS Pilani, Pilani Campus

Lab Plan

Lab Lab Objective Lab Sheet Module

No. Access URL Reference

1 Introduction to the tools and installations -

2 Misuse/Signature Detection 4
3 Spam Classification -
4 Anomaly Detection 5
5 Malware detection 6
6 Malware classification 6
7 Anomaly–Misuse Sequence Detection 7
8 Profiling Network Traffic 9

BITS Pilani, Pilani Campus

Evaluation Scheme

Component Name Type Duration Weight

EC-1 Quizzes Online 10%

Assignments Take Home 20%
EC-2 Mid-Semester Test Close Book 2.0 Hrs 30%
EC-3 Comprehensive Exam Open Book 2.5 Hrs 40%

Note:
1. Syllabus for Mid-Semester Test (Closed Book): Topics in Session Nos. 1 to 8
2. Syllabus for Comprehensive Exam (Open Book): All topics (Session Nos. 1 to 16)

BITS Pilani, Pilani Campus

Introduction to Cyber Security

BITS Pilani, Pilani Campus

Computer Security

• Computer security is protection of items or ASSETS of a

computer or computer system
• ASSETS have a value to an individual or organization
• Assets are of following types:
• Hardware: Computers, Devices (disk drives, memory cards, printers
etc), Networks
• Software: Operating system, utilities, commercial applications (MS-
Office, Oracle apps, SAP etc), individual applications
• Data: Documents, photos, emails, projects, corporate data etc
• Computer systems (hardware, software, data) have a value
and deserve security protection

BITS Pilani, Pilani Campus

 only a few cents in terms of paper and ink, may have high value to you and no value to
your roommate. Other items’ value depends on replacement cost; some computer data are
difficult or impossible to replace. For example, that photo of you and your friends at a

Asset Value
party may have cost you nothing, but it is invaluable because there is no other copy. On
the other hand, the DVD of your favorite film may have cost a significant portion of your
take-home pay, but you can buy another one if the DVD is stolen or corrupted. Similarly,
timing has bearing on asset value. For example, the value of the plans for a company’s
new product line is very high, especially to competitors. But once the new product is
• Has an owner or user perspective
released, the plans’ value drops dramatically.

• May be monetary or non-monetary

• Is personal, time dependent & often imprecise

FIGURE 1-3 Values of Assets

BITS Pilani, Pilani Campus
Vulnerability-Threat-Control Paradigm

• ‘Vulnerability’ is a weakness in the system that might be

exploited to cause loss or harm
• ‘Threat’ is a set of circumstances that has a potential to cause
loss or harm to system
• A person who exploits the vulnerability perpetrates an
‘Attack’
• ‘Control’ is an action, device, procedure of technique that
removes or reduces the vulnerability

BITS Pilani, Pilani Campus

Vulnerability-Threat-Control Example

• Vulnerability: Crack in the

wall
• Threat: Rising water level
• Attack: Someone pumping
more water
• Control: Fill the gap,
strengthen the wall

BITS Pilani, Pilani Campus

Security Triad - CIA
• Confidentiality: Ability of a system to
ensure that an asset is viewed by only
authorized parties
• Integrity: Ability of a system to ensure
that an asset is modified by only
authorized parties
• Availability: Ability of a system to
ensure that an asset can be used by any
authorized parties

Additional two properties:

• Authentication: Ability of a system to validate the identity of a sender
• Non-repudiation or Accountability: Ability of a system to confirm that a
sender can not convincingly deny having sent something

BITS Pilani, Pilani Campus

Confidentiality
• Only authorized person, program or process
can access protected data
• Failure of data confidentiality
• An unauthorized person access a data item
• An unauthorized program or process access a data item
• A person authorized to access certain data accesses other
data which he is not authorized to access
• An unauthorized person accesses approximate data value
• An unauthorized person learns the existence of data value
• Terminology:
• Subject: a person, program or process. -> who
• Object: data item. -> what
• Access mode: kind of access (read, write, execute) -> how
• Policy: authorization –> who+what+how = yes/no

BITS Pilani, Pilani Campus

 Integrity

Integrity means Integrity requires

• Precise • Actions are authorized,
• Accurate • Resources are separated &
• Unmodified protected
• Modified only in acceptable ways • Errors are detected &
corrected
• Modified only by authorized people
• Modified only by authorized processes
• Consistent
• Meaningful and usable

Integrity enforcement: Who or what can access which resources in

what ways

BITS Pilani, Pilani Campus

 Availability

• An object or service is available if:

• it is present in usable form
• It has enough capacity to meet the service needs
• It is making clear progress i.e. it has bounded waiting time
• It is completed in an acceptable period of time
• Applies to both services and data
• Timely response to requests
• resources are allocated fairly so that some requests don’t
get preferred treatment
• concurrency is controlled
• Services or systems are fault tolerant
• Services or systems are easily usable

BITS Pilani, Pilani Campus

 Acts of Harm

Interception: Confidentiality lost

Interruption: Availability lost

Modification: Integrity lost

Fabrication: Integrity lost

FIGURE 1-5 Four Acts to Cause Security Harm

nalyze harm, we next refine the C-I-A triad, looking more closely at each of its
ts. BITS Pilani, Pilani Campus
Computer Security … Redefined

• Computer security seeks to prevent unauthorized viewing

(confidentiality) or modification (integrity) of data while
preserving access (availability)
• Access control is fundamental to security
• Threats are potential cause of harm
• Threats can be caused by human or non-human
• Human threats can be malicious or non-malicious
• Malicious threats can be direct or random attack

BITS Pilani, Pilani Campus

dual (think of trying to drain a specific person’s bank account, for example, by
sonation). Another class of directed attack is against a particular product, such as
omputer running a particular browser. (We do not want to split hairs about whether
Computer Security … Redefined
n attack is directed—at that one software product—or random, against any user of
roduct; the point is not semantic perfection but protecting against the attacks.) The
of possible directed attacks is practically unlimited. Different kinds of threats are
in Figure 1-9.
• Threats are caused both by human
and other sources
• Threats can be malicious or non-
malicious
• Threats can be random or targeted
• Advance persistent threat attacks
come from organized, well
financed, patient and often govt or
quasi-govt affiliated groups

FIGURE 1-9 Kinds of Threats

BITS Pilani, Pilani Campus
Threat Actors: Attackers

• Individual
• Hackers
• Terrorist
• Criminal for hire
• Loosely connected group
• Organized crime member
• computer crime is lucrative

BITS Pilani, Pilani Campus

Threat Types
Type Description
Virus • A malicious program which is loaded into the user’s computer without user’s knowledge.
• Replicates itself and infects the files and programs on the user’s computer.
Worm • A program that can copy itself from one computer to another, without human help.
• It can use computer’s storage space as a worm can replicate in volume and with speed.
Phishing • Attempt to steal sensitive financial or personal information through fraudulent email or
instant messages disguising as a trustworthy person or business.
• Phishing is very easy to execute.
Botnet • A group of computers connected to the internet, that have been compromised by a
hacker using a computer virus.
• The compromised computer is called ‘zombie computer’.
• A bot can be used for malicious activities and for a larger scale attack like DDoS.
Rootkit • A program designed to provide continued privileged access to a computer while actively
hiding its presence.
• The controller of the rootkit will be able to remotely execute files and change system
configurations on the host machine.
Key • Keyloggers track the real-time activity of a user on computer.
Loggers • It keeps a record of all the keystrokes made by user keyboard.
• A very powerful threat to steal user credential such as username and password.
Others • Others include spyware, wabbits, scareware, bluesnarfing and many more
BITS Pilani, Pilani Campus
Common Threats Targeting Users

• False or misleading content

• Defaced website
• Fake website
• Fake or malicious code
• Malicious web content
• Clickjacking: Tricking a user into clicking by disguising what
the link pertains to
• Drive by download: Downloading and installing code other
than what a user expects

BITS Pilani, Pilani Campus

Security Challenges

Remote and Blockchain and

Emerging 5G Ransomware
Hybrid Crypto-currency
application evolution
workforce attacks

Phishing and Machine

Cloud and IOT Software
Spear phishing learning and AI
attacks vulnerabilities
attacks attacks

Outdated
Serverless App Supply Chain
hardware and Mobile malware
vulnerability attacks
software

Growth Firmware Deep fake

API attacks
hactivism weaponization technology

BITS Pilani, Pilani Campus

Security Approach

• Negative consequences of an actualized threat is harm

• Risk management involves choosing which threats to control
and what resources to devote for protection
• Risk that remains uncovered by controls is called residual risk
• Spending on security is based on impact and likelihood of
potential harm
• Cost of preventive measures should be less than cost of recovery from attack

BITS Pilani, Pilani Campus

Method – Opportunity – Motive

• Method: Skill, knowledge, tools and other things (scripts,

model programs etc) to perpetrate the attack
• Opportunity: Time and access to execute an attack
• Motive: Reason for attack (money, fame, self-esteem, politics,
terror etc)

• Method, opportunity and motive are essential for an attack –

deny any one of these and the attack will fail
• Vulnerabilities are weaknesses in the system that allow harm
to occur

BITS Pilani, Pilani Campus

Security Controls

• Prevent risk by blocking attack or closing the vulnerability

• Deter risk by making the attack harder but not impossible
• Deflect risk by making another target more attractive
• Mitigate risk by making the impact of attack less severe
• Detect risk as it happens or sometime after the attack recover
from effects

• Security professionals balance the cost and effectiveness of

controls with the likelihood and severity of harm

BITS Pilani, Pilani Campus

me are easier than others to use or implement. Some are cheaper than others to use
plement. And some are more difficult than others for intruders to override. Figure 1-1
Security Controls…
ustrates how we use a combination of controls to secure our valuable resources. We u
e or more controls, according to what we are protecting, how the cost of protectio
mpares with the risk of loss, and how hard we think intruders will work to get what th
nt.

FIGURE 1-12 Effects of Controls

In this section, we present an overview of the controls available to us. In the rest of th
ok, we examine how to use controls against specific kinds of threats.
BITS Pilani, Pilani Campus
 Security Controls…

Physical Procedural or Technical

• Walls, fence, locks Administrative • Passwords, programs
• Human guards • Advice to people on or operating system
• Sprinklers and fire how to act access controls
extinguishers • Laws and regulations • Network protocols,
network traffic flow
• Policies, procedures
regulators
and guidelines
• Firewalls and intrusion
• Copyright and patents
detection systems
• Contracts and
agreements • Encryption

BITS Pilani, Pilani Campus

Common Type of Security Vulnerability
• Source code vulnerabilities
• Injection flaws
• Lack of strong encryption
• Misconfigured system components
• Trust configuration
• Inadequate authentication
• Weak credentials
• Sensitive data exposure
• Insufficient monitoring and logs
• Insider threat
• Psychological vulnerability
• Shared tenancy vulnerabilities

BITS Pilani, Pilani Campus

Source Code Vulnerabilities
• Code vulnerabilities creep in right at the time of software development
• Logical errors that lead to security flaws – for example, creating an access
privilege lifecycle that an attacker can hijack.
• Software might inadvertently transfer sensitive data without encryption, or
even if it uses randomized encryption strings, they aren’t random enough.
• If the software development lifecycle is too protracted, multiple developers
work on the project and may cause certain functionalities to remain
unfinished.

BITS Pilani, Pilani Campus

Injection Flaws
• Misconfigured web applications can be prone to injection flaws.
• If the application takes user input through an online form and inserts that
input into a backend database, command, or operations system call, it would
leave the application open to injection attacks such as SQL, XML, or LDAP
injections.
• This vulnerability allows hackers to obtain a backdoor into the web app’s
data flow and redirect user data or even insert malicious code that causes
the application to read, update, or even delete user data without the user’s
consent.
• Injection vulnerabilities are typically responsible for data breaches

BITS Pilani, Pilani Campus

Lack of Encryption
• Unencrypted data flow is a massive risk and can lead to severe data
breaches.
• Data encryption ensures that if your primary storage platform falls into the
wrong hands, someone with malicious intent will not be able to decrypt or
make sense of the information.
• Encryption is lagging behind the pace of digital transformation and the
consequent digitization of documents.
• Research suggests that while mobile data storage is now a primary focus for
encryption, organizations are yet to address this vulnerability in USB sticks,
laptops, and portable hard drives.
• Data must be properly encrypted at rest as well as in motion.

BITS Pilani, Pilani Campus

Mis-configured System Components
• Misconfigurations are errors done when setting up enterprise IT systems.
• The administrator might forget to switch from a software’s default
configurations, thereby leaving the system open to vulnerabilities.
• Incorrectly configured cloud systems, network misconfigurations, hurriedly
set up Wi-Fi environments, and even the failure to restrict non-work device
usage exponentially multiply risk exposure.

BITS Pilani, Pilani Campus

Trust Configuration
• Trust configurations refer to the allowances made for data exchange to and
from software and hardware systems.
• For example, a mounted hard disk might be able to read sensitive data from
a computing client without necessitating any extra privileges.
• Trust relationships may exist between active directories and account
records, leading to unmitigated data flow between sources that aren’t
constantly monitored.
• Once an attacker gains access to a compromised system, they can exploit
these trust configuration vulnerabilities to spread the infection from the
original system and bring down your entire IT environment.

BITS Pilani, Pilani Campus

Inadequate Authentication
• Authentication vulnerabilities arise when there aren’t enough checks and
balances to reset passwords and credentials.
• Hacker might exploit the “forgot password” option present in every login
system to hijack your account and find a backdoor to initiate an account
takeover (ATO) attack.
• Authentication question might be too easy to guess – for example, your date
of birth, which is publicly available thanks to social media.
• System might not follow multi-factor authentication procedures, where a
single device’s compromise cannot impact an account’s security.

BITS Pilani, Pilani Campus

Weak Credentials
• One of the most common causes of vulnerabilities in both consumer and
enterprise systems.
• Users tend to stick to convenient or comfortable credentialing practices,
prioritizing ease of use over security.
• For example, to store passwords and account credentials in a browser’s
built-in password manager.
• Weak passwords that use common alphanumeric strings (123456, passw0rd,
etc.) and those reusing personal data like name, dob etc

BITS Pilani, Pilani Campus

Sensitive Data Exposure
• Sensitive data exposure can happen in several ways.
• Sheer human negligence can cause data to be uploaded to a public website
or a commonly accessed database. Inappropriate access controls might lead
to a single employee owning control over a huge database of sensitive
information.
• Unlike a data breach, there isn’t always malicious intent behind such
scenarios.
• Human errors or system misconfigurations cause sensitive data (intellectual
property, user credentials, personally identifiable information, payment
details, etc.) to end up in the wrong place where it is vulnerable to
exploitation.

BITS Pilani, Pilani Campus

Insufficient Monitoring and Logs
• Regular log analysis and detailed log records are essential for curbing
security vulnerabilities.
• An unauthorized entity may gain entry into your computing landscape
without anyone finding out before it is too late.
• A hacker or a malicious bot will leave behind bread crumbs in the form of
strange systems signals that will show up via log analysis.
• Irregular monitoring or scheduled analysis only during a specific part of the
day/week/month leaves your systems vulnerable to attacks when there is no
supervising eye looking out for suspicious behavior.

BITS Pilani, Pilani Campus

Insider Threat
• Vulnerabilities arising from insider threats are difficult to detect and even
harder to prevent, particularly in a remote working world.
• According to Forrester, 1 in 3 security breaches in 2021 were caused by an
insider threat, growing by eight percentage points from the 2020.
• There are myriad reasons why workforce might be exposed to insider threat-
related vulnerabilities, ranging from poorly thought-out recruitment
practices and background checks to bad blood within the organization and
geopolitical forces.
• With most employees working from home, it can be difficult to detect
anomalous behavior that might indicate an insider threat in organization.

BITS Pilani, Pilani Campus

Psychological Vulnerability
• Psychological vulnerabilities are also human-caused, but unlike insider
threats, they are inadvertent, and everyone is susceptible to them.
• As human beings, we are motivated by core psychological drivers such as the
urge for self-preservation, an eagerness to save/get exclusive benefits, and a
fear of danger.
• Hackers typically exploit these vulnerabilities through social engineering.
• They convince users that they need to take action to unlock a benefit or
avoid an adverse situation.
• Examples: Email & SMS links, Voice & Video calls etc

BITS Pilani, Pilani Campus

Shared Tenancy Vulnerabilities
• Shared tenancy vulnerabilities are an inevitable reality of the cloud era.
• Public cloud solutions operate in a multi-tenant model where a shared set of
resources are leased out to various organizations at different times,
depending on the scale of their resource requirements.
• If one tenant is compromised, it’s possible that the attack will spread to
other organizations on the cloud by exploiting shared tenancy
vulnerabilities.
• That’s why organizations dealing with sensitive information – like banks,
schools, and hospitals – choose to divide their workloads between public
and private tenants, keeping their most valuable data compartmentalized.

BITS Pilani, Pilani Campus

How to Identify a Security Vulnerability
• Run a network audit
• Analyze system log data
• Use a penetration tester or white-hat hacker
• Leverage a threat intelligence database
• Simulate a social engineering attack
• Use process mining to detect hidden flaws
• Review source code
• Audit IT supply chain
• Automate the security testing process
• Document the hardware landscape

BITS Pilani, Pilani Campus

Best Practices to Prevent Security Incident
• Follow least privileges access model
• Secure APIs and inventory native integrations
• Encourage a culture of scepticism
• Have a robust business continuity plan
• Start a bug bounty program

BITS Pilani, Pilani Campus

Security Techniques

Access control Cryptography Mathematical Blockchain

security

Soft AI & ML
Computing

BITS Pilani, Pilani Campus

Access Control Security
• A security framework that determines who has access to which resources through
previously placed authentication and authorization rules.
• Authenticates users by verifying login credentials, including usernames, passwords,
PINs, security tokens, and biometric scans.
• Types of Access Control
• Discretionary access control (DAC):
• Every object in a protected system has an owner, and owners grant access to users at their discretion.
• DAC provides case-by-case control over resources.
• Role-Based Access Control (RBAC):
• Access is granted based on defined business functions, rather than individuals’ identity or seniority.
• Provide users access only with the data they need to perform their jobs—and no more
• Attribute-Based Access Control (ABAC):
• Access based on a combination of attributes and environmental conditions, such as time and location.
• Most granular access control model and helps reduce the number of role assignments.
• Mandatory access control (MAC):
• Users are granted access in the form of a clearance. A central authority regulates access rights and
organizes them into tiers, which uniformly expand in scope.
• Very common model in government and military contexts.

BITS Pilani, Pilani Campus

Cryptography Security
• Protection of confidentiality and integrity of the information without being
vulnerable to attackers or threats
• An encryption technique that ensures the data is only visible to the sender
and recipient and no middle man can steal or snoop for information
• Common Cryptographic techniques:
• Symmetric key cryptography
• Public key cryptography
• Hash functions
• Digital Signatures
• Message Authentication Codes
• Steganography
• Quantum Cryptography

BITS Pilani, Pilani Campus

Mathematical Approach to Security
• Mathematical models can represent real-world cyber-attack situations.
• Mathematical models can help to design and evaluate systems/
infrastructures, especially from a security perspective.
• Mathematical models help better understanding of system vulnerabilities,
attack vectors, points of failure, and the life cycle of a cyber attack.
• One can analyze various security defense mechanisms/strategies, provide
rigorous security guarantees for a system, and perform a cost-benefit
analysis by finding the best attack-response strategies in different attack
scenarios.
• Common Models for Security
• Markov model for moving target defense
• Malware propagation and containment modelling

BITS Pilani, Pilani Campus

Blockchain Security
• Use of distributed ledger technology by blockchain
• A dispersed public key infrastructure model reduces risks associated with centrally
stored data
• Transactions recorded across every node in the network make it difficult for
attackers to steal, compromise, or tamper with data, unless a vulnerability exists
at the platform level
• Use of collaborative consensus algorithm
• Watches for malicious actions, anomalies, and false positives without the need for
a central authority
• Strengthens authentication and secures data communications and record
management
• Through encryption and digital signatures, a blockchain can shield connected
thermostats, smart doorbells, security cameras, and other edge devices.
• A blockchain-based domain name system (DNS) can remove the single point
that allows these attacks to succeed

BITS Pilani, Pilani Campus

Soft-Computing Security
• Soft computing helps users to solve real-world problems by providing
approximate results that conventional and analytical models cannot solve.
• Algorithms of soft computing are adaptive, so the current process is not
affected by any kind of change in the environment.
• Soft computing is based on learning from experimental data - it does not
require any mathematical model to solve the problem.
• Example:
• String 1=“xyz”, String2=‘xyw”
• Question: How much String1 & String2 are same?
• Answer: Conventional (Hard) computing = NO, Soft Computing = 67%

BITS Pilani, Pilani Campus

AI & ML Security Techniques
• AI in cybersecurity: Helps to eliminate the cyber attacker’s activities and automates
the threat detection and response process more effectively than traditional methods.
• Detecting New Security Threats
• Endpoint Protection
• Identity Analytics and Fraud Detection
• IT Asset Inventory
• Smart Botnets: Automated Malware Detection and Prevention
• ML in cybersecurity: Helps understand past cyber attack experiences and improving
security processes (identify, prioritize, respond, and remediate attacks quickly)
• Automated Security Workflow
• Network Risk Scoring
• Threat Detection and Classification
• Advantages of using AI and ML
• Increases the Detection and Response Process
• Improves Security Posture
• Reduces the Workloads
• Low IT Cost

BITS Pilani, Pilani Campus

Factors for Expanding Attack Surface

BITS Pilani, Pilani Campus

Security Trends

Developing Using Zero Trust Augmenting Stricter Rise of threat

cloud security in combination supply chain requirements detection and
with a VPN infrastructure for cyber response tools
security
compliance

BITS Pilani, Pilani Campus

Thank You

BITS Pilani, Pilani Campus