Expanding on use cases of AI in threat intelligence
Apart from posts, there are many other datasets where NLP is relevant. For instance, in threat intelligence, the source of information could be blogs, news posts, but also security-specific data such as IP blacklists or malware data. Aggregating this threat data using big data platforms and applying machine learning algorithms can enable us to get important information that can be intractable or just be missed by a human analyst.
For instance, Microsoft, in their blog, described their application of machine learning to get information about advanced persistent threats (https://www.microsoft.com/en-us/security/blog/2019/08/08/from-unstructured-data-to-actionable-intelligence-using-machine-learning-for-threat-intelligence/).
Another company called Abnormal Security used machine learning to analyze email threats (https://abnormalsecurity.com/blog/using-artificial-intelligence-address-email-threats).
In recent years, we have...