Information Security Management, 2nd Edition

12.1 Cybersecurity Analytics and Machine Learning

Analytics in information and cybersecurity are pervasive. The field involving the use of analytics is called data science. Here, we will just touch on some of the topical areas to give an idea of the span of analytics uses. In particular, we will briefly mention machine learning and some of its applications ranging from spam filters to self-healing in adaptive systems; we will then discuss traffic analysis, including metadata and behavioral analysis aspects, and present some analytics used in threat modeling. In the earlier chapter on cryptography, we presented ways that ciphertext and keys may be attacked using various schemes. Machine learning (ML) is increasingly used both for creating new ...