How to Predict Which Vulnerabilities Will Be Exploited - Tudor Dumitras - USENIX Enigma Conference - 2019
USENIX Enigma Conference via YouTube
NY State-Licensed Certificates in Design, Coding & AI — Online
Finance Certifications Goldman Sachs and Amazon Teams Trust
Overview
Syllabus
Intro
How Do You Give Security Advice?
To Patch or Not To Patch?
Can We Predict Exploits?
Must Validate Predictions-Exploits in the Wild
Machine Learning and Security Predictions
Prediction With Intrinsic Features
What Are We Predicting?
Intuition: CVE-2017-0144
Mining Twitter to predict Exploitation
Predicting Exploits in the Wild
Did We Get Lucky?
Time to Patch 50% of Vulnerable Hosts
One Vulnerability, Different Patches
Patching Patterns As Risk Factors
#3. Prediction Performance
What You Can Do Today
What You Can Do Tomorrow
Taught by
USENIX Enigma Conference