Cybersecurity Science with Shawn Riley

Introduction Artificial Intelligence (AI) is a rapidly evolving field, with many subfields and techniques for building intelligent systems. One of the most promising subfields is Machine Reasoning, which uses symbolic representations and logical reasoning to draw conclusions from data. In the field of cybersecurity, machine reasoning can be used to build a virtual attacker that can simulate millions of cyber attacks to determine specific attack scenarios against an organization, and calculate the risk from these attacks. In this article, we will explore what machine reasoning is, how it can be used to build a virtual attacker, and what challenges need to be addressed to make it work. Machine Learning vs. Machine Reasoning Before diving into machine reasoning, it is important to distinguish it from machine learning, which is often used interchangeably with AI. Machine learning is a statistical method that involves the analysis of large amounts of data to identify hidden patterns and bui...

Structured Analytic Techniques (SATs) are analytical methods used by cybersecurity professionals to help them analyze data and make better-informed decisions. SATs can be applied to a variety of cybersecurity tasks, including threat intelligence analysis, risk assessments, vulnerability assessments, and incident response. In this article, we'll explore 10 commonly used SATs in cybersecurity and how they can be applied to various cybersecurity tasks. Analysis of Competing Hypotheses (ACH) The ACH is a SAT that helps analysts systematically evaluate and compare multiple hypotheses. It is often used in threat intelligence analysis to assess the likelihood of various threat scenarios. ACH involves creating a matrix that compares each hypothesis against each other, and then evaluating the evidence for and against each hypothesis. This allows analysts to make a more informed decision about the most likely threat scenario. Key Assumptions Check (KAC) The KAC is a SAT that helps analysts i...

Structured Analytic Techniques (SATs) are a set of methods used to enhance decision-making and problem-solving in various industries. In the field of cybersecurity, SATs can be used in conjunction with the steps of argument-driven inquiry (ADI) to improve the quality of cybersecurity risk assessments and threat intelligence analysis. One of the benefits of using SATs is that they provide a structured framework for collecting, analyzing, and synthesizing data. This can help cybersecurity professionals to identify and assess potential threats more effectively, and to develop more accurate predictions about future threat scenarios. For example, the Key Assumptions Check is a SAT that can be used to identify the underlying assumptions that inform a cybersecurity hypothesis. By examining these assumptions, cybersecurity professionals can gain a deeper understanding of the risks and vulnerabilities that may be present in their systems. Another benefit of using SATs in cybersecurity is that t...