Symantec Detects Threats with AI

Had some conversations on threats as specific patterns of behavior, by people or agents.  Seems there is lots of data of this type now being gathered to train systems.

Symantec seeks out targeted attacks with AI-based threat detection tool

By Mike Wheatley in SiliconAngle

Cybersecurity specialist Symantec Corp. says it’s targeting “targeted attacks” on enterprises with the launch of a new threat detection tool that was used to uncover some of the most infamous cyberattacks in history.

Symantec’s new Targeted Attack Analytics tool was created by the company’s Attack Investigation team, which used the technology to uncover malware attacks such as the Stuxnet bug that was responsible for causing substantial damage to Iran’s nuclear program. The same team also helped to uncover the Regin malware, which is said to have been used by the U.S. National Security Agency to attack computer systems in countries such as Russia and Saudi Arabia for gathering intelligence.

Symantec defines targeted attacks as those directed at a specific target or targets as opposed to widescale indiscriminate campaigns. “The primary motivation is intelligence gathering, sabotage, or financial. Broadly speaking they correspond to espionage,” said Adam Bromwich, senior vice president of Security Technology and Response at Symantec. “While these are the main disruptors, we have also observed these lines blur with private operators entering the picture and groups branching outside of espionage.” ....  "