{"id":5491,"date":"2024-09-30T15:52:41","date_gmt":"2024-09-30T19:52:41","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=5491"},"modified":"2024-10-15T16:53:02","modified_gmt":"2024-10-15T20:53:02","slug":"harnessing-data-science-and-ai-in-cybersecurity","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/","title":{"rendered":"Harnessing Data Science and AI in Cybersecurity"},"content":{"rendered":"
\n

\"Harnessing<\/p>\n

Ravisha<\/span> Chugh, an Email Security Evangelist at Fortra<\/a>, explains how companies harness data science and AI technologies in their cybersecurity initiatives. This article originally appeared in Insight Jam<\/a>, an enterprise IT community that enables human conversation on AI.<\/span><\/strong><\/em><\/p>\n

\"\"<\/a>In today’s digital landscape, email remains a primary communication channel. However, its widespread use makes it a prime target for advanced email threats. In recent years, the industry has seen a fundamental shift where attackers have moved beyond trying to deceive the email environment to deceive human beings. These modern attacks leverage impersonation techniques, where the attacker sends a message that appears to come from a known identity\u2014an individual, organization, or consumer brand\u2014that the recipient inherently trusts.<\/p>\n

This shift is clearly illustrated by the kinds of threats that are currently reaching enterprise user inboxes. An in-depth analysis of threats observed in inboxes found that over 98 percent of threats getting past enterprise email security controls are impersonation threats like Business Email Compromise (BEC) and credential theft phishing lures. While they can consistently detect malware payloads, Secure Email Gateways and “baked-in” cloud add-ons do not reliably stop impersonation tactics and social engineering threats.<\/p>\n

Leveraging data science and artificial intelligence (AI) has become crucial to combat these evolving challenges. Advanced threat detection can easily be achieved through machine learning algorithms trained on vast data sets of known phishing, spam, and legitimate emails.<\/p>\n

One way to achieve this is to use natural language processing (NLP) techniques, which enable AI to understand and analyze the content of emails by detecting suspicious language, unusual requests, potential phishing attempts, or deviation from a pattern that may be considered an anomaly. NLP does this by parsing email text to identify keywords and phrases commonly associated with scams. In addition, to identify unknown threats, leveraging a combination of machine learning models, large language models (LLMs), and neural networks is key.<\/p>\n

How Does Machine Learning (ML) in Work Cybersecurity?<\/strong><\/h3>\n

To best explain how AI works behind the scenes, it is essential to break down the parts of a message that are analyzed and how the machine learning models can be applied\u2013this includes the various components embedded in email header data, including:<\/p>\n

    \n
  • “From” field, or Sender Display Name<\/li>\n
  • The “To” field, or Recipient Display Name<\/li>\n
  • Subject Line<\/li>\n
  • Local Part, or Email Prefix<\/li>\n
  • Email Sending Domain of Webmail Address<\/li>\n<\/ul>\n

    In addition, ML models scan any contextual data like text and metadata. These include:<\/p>\n

      \n
    • The sender\u2019s infrastructure<\/li>\n
    • The number of days the IP address has been used to send from on behalf of the domain<\/li>\n
    • The number of emails sent using the same Local Part of the email<\/li>\n
    • The number of emails using the same Display Name<\/li>\n
    • The intent of the email (examine the nature of the content, like the Subject Line)<\/li>\n
    • Matching Address Group and Display Name<\/li>\n
    • Character text used in the Local Part of email (Latin vs. Cyrillic)<\/li>\n
    • SPF (Sender Policy Framework) \/ DKIM (DomainKeys Identified Mail) \/ DMARC (Domain-based Message Authentication, Reporting & Conformance) records<\/li>\n<\/ul>\n

      In this vein, a type of pre-train and fine-tune paradigm can come in handy\u2013to adapt pragmatic pre-trained models to various downstream tasks, such as:<\/p>\n

        \n
      • Analyzing specific text-based email components, such as Subject Lines and body content<\/li>\n
      • Determining message type or level of suspiciousness<\/li>\n
      • Identifying groupings or clusters in email data<\/li>\n
      • Creating data lakes with labeled data that other models can use<\/li>\n
      • Ingesting feeds of useful data\u2013like lists of suspicious domains and IP address groups<\/li>\n<\/ul>\n

        When it comes to the application of AI, it can initiate takedowns of malicious domains and enforce policies like DMARC to prevent future email abuse from those domains. AI can also be implemented to automate incident response capabilities, arming systems with the ability to automatically quarantine suspicious emails, preventing them from reaching the intended recipient. This real-time intervention significantly reduces the risk of successful phishing attacks and enables quicker mitigation of threats, minimizing the window of opportunity for attackers to exploit vulnerabilities.<\/p>\n

        Though every machine learning paradigm has strengths and weaknesses, it continues to push forward and create opportunities to perform tasks more accurately and efficiently. For these reasons, it is critical to understand the task objective and select the ideal machine learning paradigm to perform the task well.<\/p>\n

        This is especially true for machine learning applications that can impact the efficiency of business operations, which could potentially bottleneck the flow of inbound and outbound communications. AI automation in detecting and responding to threats reduces the need for extensive manual intervention. This leaves security teams free to focus on more strategic tasks, improving overall operational efficiency.<\/p>\n

        Overall, using data science in email security can enhance an organization’s security posture by reducing phishing incidents, which in turn leads to fewer data breaches and financial losses for enterprise organizations.<\/p>\n

        \n

        \n<\/div>\n","protected":false},"excerpt":{"rendered":"

        Ravisha Chugh, an Email Security Evangelist at Fortra, explains how companies harness data science and AI technologies in their cybersecurity initiatives. This article originally appeared in Insight Jam, an enterprise IT community that enables human conversation on AI. In today’s digital landscape, email remains a primary communication channel. However, its widespread use makes it a […]<\/p>\n","protected":false},"author":1167,"featured_media":5492,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551],"tags":[322,95,2392,2057,2394,2393],"acf":[],"yoast_head":"\nHarnessing Data Science and AI in Cybersecurity<\/title>\n<meta name=\"description\" content=\"Ravisha\u00a0Chugh from Fortra explains how companies are harnessing data science and AI technologies in their cybersecurity initiatives.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Harnessing Data Science and AI in Cybersecurity\" \/>\n<meta property=\"og:description\" content=\"Ravisha\u00a0Chugh from Fortra explains how companies are harnessing data science and AI technologies in their cybersecurity initiatives.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Information Security SIEM Tools, Software, Solutions & Vendors\" \/>\n<meta property=\"article:published_time\" content=\"2024-09-30T19:52:41+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-15T20:53:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2024\/10\/Harnessing-Data-Science-and-AI-in-Cybersecurity.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ravisha Chugh\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ravisha Chugh\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/\",\"name\":\"Harnessing Data Science and AI in Cybersecurity\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2024\/10\/Harnessing-Data-Science-and-AI-in-Cybersecurity.jpg\",\"datePublished\":\"2024-09-30T19:52:41+00:00\",\"dateModified\":\"2024-10-15T20:53:02+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/d65bf23f9d5289d5f205e6833aeb003f\"},\"description\":\"Ravisha\u00a0Chugh from Fortra explains how companies are harnessing data science and AI technologies in their cybersecurity initiatives.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2024\/10\/Harnessing-Data-Science-and-AI-in-Cybersecurity.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2024\/10\/Harnessing-Data-Science-and-AI-in-Cybersecurity.jpg\",\"width\":800,\"height\":400,\"caption\":\"Harnessing Data Science and AI in Cybersecurity\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Harnessing Data Science and AI in Cybersecurity\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"Best Information Security SIEM Tools, Software, Solutions & Vendors\",\"description\":\"Buyer's Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/d65bf23f9d5289d5f205e6833aeb003f\",\"name\":\"Ravisha Chugh\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2024\/10\/Ravisha-Chugh.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2024\/10\/Ravisha-Chugh.jpg\",\"caption\":\"Ravisha Chugh\"},\"description\":\"Ravisha Chugh is an Email Security Evangelist at global cybersecurity software and services provider Fortra. With over a decade of experience in cybersecurity, Ravisha is passionate about helping organizations keep their digital information safe. She understands the proactive measures and implementation strategies required to protect sensitive information over email and guard against the evolving threat landscape. At Fortra, Ravisha works closely with enterprise security and IT teams, and guides Fortra\u2019s email security product strategy and messaging accordingly. Previously, as a Senior Principal Analyst at Gartner, she advised clients on email security, phishing protection, and unstructured data security.\",\"sameAs\":[\"https:\/\/www.fortra.com\/\",\"https:\/\/www.linkedin.com\/in\/ravisha-chugh-94b239a4\/\"],\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/rchugh\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Harnessing Data Science and AI in Cybersecurity","description":"Ravisha\u00a0Chugh from Fortra explains how companies are harnessing data science and AI technologies in their cybersecurity initiatives.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/","og_locale":"en_US","og_type":"article","og_title":"Harnessing Data Science and AI in Cybersecurity","og_description":"Ravisha\u00a0Chugh from Fortra explains how companies are harnessing data science and AI technologies in their cybersecurity initiatives.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/","og_site_name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","article_published_time":"2024-09-30T19:52:41+00:00","article_modified_time":"2024-10-15T20:53:02+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2024\/10\/Harnessing-Data-Science-and-AI-in-Cybersecurity.jpg","type":"image\/jpeg"}],"author":"Ravisha Chugh","twitter_misc":{"Written by":"Ravisha Chugh","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/","name":"Harnessing Data Science and AI in Cybersecurity","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2024\/10\/Harnessing-Data-Science-and-AI-in-Cybersecurity.jpg","datePublished":"2024-09-30T19:52:41+00:00","dateModified":"2024-10-15T20:53:02+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/d65bf23f9d5289d5f205e6833aeb003f"},"description":"Ravisha\u00a0Chugh from Fortra explains how companies are harnessing data science and AI technologies in their cybersecurity initiatives.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2024\/10\/Harnessing-Data-Science-and-AI-in-Cybersecurity.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2024\/10\/Harnessing-Data-Science-and-AI-in-Cybersecurity.jpg","width":800,"height":400,"caption":"Harnessing Data Science and AI in Cybersecurity"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/harnessing-data-science-and-ai-in-cybersecurity\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Harnessing Data Science and AI in Cybersecurity"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","description":"Buyer's Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/d65bf23f9d5289d5f205e6833aeb003f","name":"Ravisha Chugh","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2024\/10\/Ravisha-Chugh.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2024\/10\/Ravisha-Chugh.jpg","caption":"Ravisha Chugh"},"description":"Ravisha Chugh is an Email Security Evangelist at global cybersecurity software and services provider Fortra. With over a decade of experience in cybersecurity, Ravisha is passionate about helping organizations keep their digital information safe. She understands the proactive measures and implementation strategies required to protect sensitive information over email and guard against the evolving threat landscape. At Fortra, Ravisha works closely with enterprise security and IT teams, and guides Fortra\u2019s email security product strategy and messaging accordingly. Previously, as a Senior Principal Analyst at Gartner, she advised clients on email security, phishing protection, and unstructured data security.","sameAs":["https:\/\/www.fortra.com\/","https:\/\/www.linkedin.com\/in\/ravisha-chugh-94b239a4\/"],"url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/rchugh\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/5491"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/1167"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=5491"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/5491\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/5492"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=5491"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=5491"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=5491"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}