ADAPTIVE LEARNING FOR ENTERPRISE THREAT MANAGMENT

摘要

A reactive approach to enterprise threat management provides a solution to the problem of prioritizing security violations. In an embodiment, a linear adaptive learning approach is aimed towards a system which could effectively assist security administrators to prioritize reported violations. The approach is adaptive in the sense that the system can change its logic over a course of time controlled only by some specified structural constraints. A learning aspect specifies that any mismatch between a system's response and the response of a security expert is propagated back to the system for adapting the difference such that the responses of the system should increasingly match against the security expert's responses over time. The presented algorithm learns and predicts simultaneously, continually improving its performance as it makes each new prediction and finds out how accurate it is.