A developmental approach to learning causal models for cyber security

Jonathan Mugan

doi:10.1117/12.2014418

28 May 2013 A developmental approach to learning causal models for cyber security

Jonathan Mugan

Proceedings Volume 8751, Machine Intelligence and Bio-inspired Computation: Theory and Applications VII; 87510A (2013) https://doi.org/10.1117/12.2014418
Event: SPIE Defense, Security, and Sensing, 2013, Baltimore, Maryland, United States

Abstract

To keep pace with our adversaries, we must expand the scope of machine learning and reasoning to address the breadth of possible attacks. One approach is to employ an algorithm to learn a set of causal models that describes the entire cyber network and each host end node. Such a learning algorithm would run continuously on the system and monitor activity in real time. With a set of causal models, the algorithm could anticipate novel attacks, take actions to thwart them, and predict the second-order effects flood of information, and the algorithm would have to determine which streams of that flood were relevant in which situations. This paper will present the results of efforts toward the application of a developmental learning algorithm to the problem of cyber security. The algorithm is modeled on the principles of human developmental learning and is designed to allow an agent to learn about the computer system in which it resides through active exploration. Children are flexible learners who acquire knowledge by actively exploring their environment and making predictions about what they will find,^{1, 2} and our algorithm is inspired by the work of the developmental psychologist Jean Piaget.³ Piaget described how children construct knowledge in stages and learn new concepts on top of those they already know. Developmental learning allows our algorithm to focus on subsets of the environment that are most helpful for learning given its current knowledge. In experiments, the algorithm was able to learn the conditions for file exfiltration and use that knowledge to protect sensitive files.

Citation Download Citation

Jonathan Mugan "A developmental approach to learning causal models for cyber security", Proc. SPIE 8751, Machine Intelligence and Bio-inspired Computation: Theory and Applications VII, 87510A (28 May 2013); https://doi.org/10.1117/12.2014418

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available