Unit 1 UNIT 1

8 lecture hours

• Machine Learning and Cyber Security Cyber threat landscape
• The cyber attacker’s economy
• A marketplace for hacking skills
• Indirect monetization
• The upshot
• Adversaries using machine learning
• Real-world uses of machine learning in security
• Spam Fighting: An iterative approach
• Limitations of machine learning in security
• Machine Learning: problems and approaches
• Machine Learning in practice: A worked example
• overview of classification and clustering

Unit 2 UNIT 2

8 lecture hours

• Anomaly Detection using Artificially Intelligent Methods When to use anomaly detection versus supervised learning
• Intrusion detection with heuristics
• Data-driven methods
• Feature engineering for anomaly detection
• Host intrusion detection
• Network intrusion detection
• Web application intrusion detection
• Anomaly detection with data and algorithms
• Forecasting (supervised machine learning)
• Statistical metrics
• Unsupervised machine learning algorithms
• Density-based methods
• Challenges of using machine w.e.f
• AY 2021-22 learning in anomaly detection
• Response and mitigation
• Practical system design concerns
• Optimizing for explainability
• Maintainability of anomaly detection systems
• Integrating human feedback
• Mitigating adversarial effects

Unit 3 UNIT 3

8 lecture hours

• Network Traffic Analysis using Artificially Intelligent Methods Theory of network defense
• Access control and authentication
• Intrusion detection
• Detecting in-network attackers
• Data-centric security
• Machine learning and network security
• From captures to features
• Threats in the network
• Botnets and you, Building a predictive model to classify network attacks
• Exploring the data
• Data preparation
• Supervised learning
• Semi-supervised learning
• Unsupervised learning
• Advanced ensembling

Unit 4 UNIT 4

6 lecture hours

• Protecting the Consumer Web Monetizing the consumer web, Types of abuse and the data that can stop them
• Authentication and account takeover
• Account creation
• Financial fraud
• Bot activity
• Supervised learning for abuse problems
• Labeling data
• Cold start versus warm start
• False positives and false negatives
• Multiple responses
• Large attacks
• Clustering abuse
• Example: clustering spam domains
• Generating clusters
• Scoring clusters
• Further directions in clustering

Unit 5 UNIT 5

6 lecture hours

• Adversarial Machine Learning Terminology
• The importance of adversarial ML, Security vulnerabilities in machine learning algorithms
• Attack transferability
• Attack technique: model poisoning
• Example: binary classifier poisoning attack
• Attacker knowledge
• Defense against poisoning attacks
• Attack technique: evasion attack
• Example: binary classifier evasion attack
• Defense against evasion attacks

Unit 6 UNIT 6

• Recent Trends in AI for Cyber Security 04 05 Text Books/ Reference Books 1
• Machine Learning and Security by Clarence Chio and David Freeman
• O'Reilly Media
• AI in Cybersecurity by Leslie F
• Sikos Springer International Publishing 3
• Artificial Intelligence For Cyber Security Methods Issues And Possible Horizons Or Opportunities by Misra S. w.e.f
• AY 2021-22 Springer