How threat actors can evade detection via threat correlation

Assignment Help Computer Engineering

Reference no: EM132345483

Assignment: Given the vast amount of known threat indicators and level of network activity today, automation has become a necessity. It's often difficult and time consuming for human analysts to efficiently manage large amounts of granular data and a wide range of cognitive biases. Therefore, manual threat correlation is often too slow to keep up with the amount of data generated, results include a high number of false negatives and positives, and outputs are not always reproducible.

However, performing manual threat correlation processes will remain crucial. The human brain's ability to leverage well-formed biases and perform higher-order reasoning is essential for assessing the validity and value being provided by whatever solutions your organization uses as well as building your cyber threat management team's knowledge base. Thus, even when automated methods are employed, the final tier of analysis typically uses these human abilities for sense-making before any actions are taken.

Conduct your own research and post something relevant about the topic such as :

• Field Techniques of Comparison?

• Rules for Based Matching?

• What is Fuzzy Matching?

Bonus point: How threat actors can evade detection via threat correlation?

Reference no: EM132345483

Questions Cloud

Explain how geography interacts with sociology : Explain how geography interacts with sociology

Identify and discuss a real-world application of bi : Identify and briefly discuss a real-world application of BI? (Need 2 discussions each 250 words total 500 words)no plagarism. The response must be typed.

Workplace and outside of work place : 1. Identify all the cultural and social norms in South Korea when it comes to gender, both in workplace and outside of work place.

Qualitative and quantitative comparison : As we have learned throughout this course, quantitative techniques focus on breadth and generalizability, while qualitative techniques focus on depth

How threat actors can evade detection via threat correlation : Given the vast amount of known threat indicators and level of network activity today, automation has become a necessity. It's often difficult and time consuming

Terms of promoted videos in searches : Do you ever fail to come up with videos? What do you see in terms of promoted videos in these searches?

How are they going about brand-building : Visit one or more of the websites you have been following. Think about the nature of their brand, whether it is a tangible product

What other expenses would the organization need to incur : Using a Web browser, look for the open source and freeware intrusion detection tools listed in the chapter. Next, identify two to three commercial equivalents.

Think about your own consumption of video : Think about your own consumption of video. What kinds of entertainment and informational videos are you most likely to view? Why?

User Account

All Pages