ML tools can help identify phishing attempts, even sophisticated ones that might slip past regular filters, Riboldi says. βOver time, these systems get better,β he says. βThis leads to fewer false alarms and more focus on actual threats. As not all security weaknesses are the same, machine learning can help prioritize those vulnerabilities that are a threat for the business.β
Emphasize the βlearningβ part of ML
To be truly effective, models need to be retrained with new data to keep up with changing threat vectors and shifting cyber criminal behavior.
βMachine learning models get smarter with your help,β Riboldi says. βMake sure to have feedback loops. Letting analysts label events and adjust settings constantly improves their accuracy. Also, the data you give them is key. It needs to be good, secure, and come from different sources, like your computers, the cloud, login systems, etc.β
