The Complexity of Cybersecurity
Jean‐Pierre Briffaut, Philippe Kourilsky · 2023
Thinking about the security of a computer system requires a systemic approach that takes into account the strong heterogeneity of the components of the system and the complexity of the interactions that animate it. This chapter presents a comprehensive study of complexity analysis in cybersecurity. It shows how machine learning techniques improve the detection, classification and handling of cyber-threats. The chapter also presents user and entity behavior analysis (UEBA) machine learning as a way of reducing the complexity of a cyber-physical system. UEBA is the solution that companies need to use to detect anomalies in network-generated log data. Using UEBA, companies do not track security events or monitor devices; instead, they track all the users and entities in the system. Cybersecurity logs capture all the events and relations of the cyberphysical systems. The chapter explores different types of virus and malware that companies are facing and the complexity linked to the overall cyberdefense process.