Endpoint Detection and Response: Why Use Machine Learning?
Nilam Nur Amir Sjarif, Suriayati bt Chuprat, Mohd Naz’ri Mahrin, Noor Azurati Ahmad, Aswami Fadillah Mohd Ariffin, Firham M. Senan, Nazri Ahmad Zamani, Afifah Saupi · 2019
Threats towards the cyberspace have becoming more aggressive, intelligent and some attack at real-time. These urged both researchers and practitioner to secure the cyberspace at the very root point, which refer to as the endpoint. The detection and response at endpoint must be able to protect at real-time as good as the attacker. In this paper, we reviewed the techniques used in endpoint detection and response. We discovered the trend have shifted from the traditional approaches to more intelligent way. Specifically, most proposed techniques focused on machine learnings. We also zoomed into these techniques and outline the advantages of these techniques.