Evidence-Based Detection of Advanced Persistent Threats
Gheorghe D. Tecuci, Dorin Marcu, Steven Meckl, Mihai Boicu · Computing in Science & Engineering · 2018
This paper presents an approach to the automation of cybersecurity operations centers with cognitive assistants that capture and automatically apply the expertise employed by cybersecurity analysts when they investigate advanced persistent threats. The goal is to significantly increase the probability of detecting intrusion activity while drastically reducing the workload of the operators.