会议记录- AI/ML网络安全：SIAM数据采掘2021的挑战、解决方案和新想法
Proceedings - AI/ML for Cybersecurity: Challenges, Solutions, and Novel Ideas at SIAM Data Mining 2021
摘要：
恶意网络活动无处不在，其有害影响对社会产生巨大且往往不可逆转的影响。鉴于网络安全专业人员的短缺，不断发展的对手，可能包含攻击证据的大量数据，以及必须采取防御行动的速度，必须继续扩大能够实现网络安全自主性的创新，以摆脱被动防御态势，走向更主动的防御态势。这一领域的挑战与在其他领域（如计算机视觉）应用人工智能的挑战截然不同。环境遭受了令人难以置信的高度不确定性，这是由于难以获取所有可用数据，以及恶意行为者操纵数据的可能性。这一领域的另一个独特挑战是，对手的活力导致妥协指标经常变化，而且没有警告。尽管存在这些挑战，但机器学习已被应用于这一领域，并在检测领域取得了一些成功。虽然这方面的问题远未解决，但越来越多的商业部门正在提供ML增强的功能即服务。这些实体中的许多实体还提供促进这些自动化解决方案的部署的平台。该领域的学术研究正在增长，并继续影响当前的解决方案，以及加强基础知识，这将使该领域的自主智能体成为可能。
英文摘要：
Malicious cyber activity is ubiquitous and its harmful effects have dramatic and often irreversible impacts on society. Given the shortage of cybersecurity professionals, the ever-evolving adversary, the massive amounts of data which could contain evidence of an attack, and the speed at which defensive actions must be taken, innovations which enable autonomy in cybersecurity must continue to expand, in order to move away from a reactive defense posture and towards a more proactive one. The challenges in this space are quite different from those associated with applying AI in other domains such as computer vision. The environment suffers from an incredibly high degree of uncertainty, stemming from the intractability of ingesting all the available data, as well as the possibility that malicious actors are manipulating the data. Another unique challenge in this space is the dynamism of the adversary causes the indicators of compromise to change frequently and without warning. In spite of these challenges, machine learning has been applied to this domain and has achieved some success in the realm of detection. While this aspect of the problem is far from solved, a growing part of the commercial sector is providing ML-enhanced capabilities as a service. Many of these entities also provide platforms which facilitate the deployment of these automated solutions. Academic research in this space is growing and continues to influence current solutions, as well as strengthen foundational knowledge which will make autonomous agents in this space a possibility.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
