* Rodrigo Santiago
Which is Machine Learning?
Machine Learning is a type of artificial intelligence that, using algorithms capable of recognizing and analyzing patterns, enables computers to “learn” a set of actions and be able to make decisions and make predictions on their own.
The use of machine learning allows the software receive a “training” from a set of pre-established data to perform a certain activity The Program then proceeds in an assisted way to automatically “learn” strategies to improve their performance from the tests.
After training the software it can be implemented in practice independently to carry out analyzes and perform activities from them.
Techniques of Machine Learning
With the evolution of machine learning it was realized that different types of problems demand different learning approaches. With this in mind, techniques were developed that consider the data to be processed and focus on meeting the specific needs of users.
The main types of machine learning are:
- Supervised learning;
- Unsupervised learning;
- Reinforcement learning.
Machine Learning and Cybercrime:
Through machine learning hackers use algorithms to group characteristics of user behavior in the web as patterns and use them to “teach” malware and develop methodologies for executing types of attacks from the simplest to the most complex. The automation of attack techniques makes the search for information and personal data easier, the greater the amount of personal data a user leaves public on the network, the greater the chances of it falling into the groupings carried out by the user. malware and have your information stolen.
The lack of a human controller to guarantee the dissemination of the malware inside a machine is the main factor that differentiates them from common viruses. They are already self-programmed and intelligently search for machines that are most vulnerable within the same network.
Attacks with Machine Learning
The creation of malware is normally carried out through the manual process of scripts that define the guidelines of the attack. Knowing the need for organizations to implement automated processes to ensure systems security, cybercriminals began to optimize their techniques through machine learning with the intention of creating better and more dangerous attacks.
The main types of attacks that are currently used with the machine learning in its elaboration are.
- Ramsoware;
- Hivenets;
- Swormbots;
- Phishing;
- Spoofing;
- Spywares;
- Troajans;
SI and the Machine Learning
As previously mentioned, the need to use the machine learning in the development of monitoring and defense techniques against cyber attacks, it is already studied and implemented by professionals in the Information Security market.
With the use of machine learning IS professionals put themselves at an advantage in relation to threats, managing to perform vulnerability analysis through optimized systems, to identify gaps in the infrastructure and thus implement measures to mitigate the existing risks, making the architecture less attractive and more resilient to threats. .
Although this strategy proves valid, there are still few companies that invest in better security technologies. Most organizations end up suffering from more elaborate attacks, because even if there is a protection architecture, it does not receive the necessary investment, causing the company to suffer great losses. That is why it is important that security professionals make customers aware to adopt new technologies and optimize processes, invest in security itself, as a certainty that spending is in fact a guarantee that their assets are protected and their environment is safe.
Final considerations
O machine learning it is a fundamental technology for the development of security technologies. Ensuring a good information security structure will ensure a knowledge and analysis of all risks to your business, being able to direct the optimization of resources and the implementation of mitigation measures.
* Rodrigo Santiago is a Consultant at Safeway
About [SAFEWAY]
SAFEWAY is an Information Security consulting company, recognized by its clients for offering high value added solutions through projects that fully meet business needs. During these years of experience, we have proudly accumulated several successful projects that have earned us credibility and prominence in our clients, which constitute in large part the 100 largest companies in Brazil.
