blodgic / cybersecurity_ml

Data Science for Security Analysts

This is meant as a worksop and introduction to data science for cyber security analysts

Slides: https://www.slideshare.net/secret/AX59YQkgxcatMi

In this workshop we will conduct the following:

1. Review a DGA
2. Perform feature engineering to identify DGA's from benign URLs
3. Leverage Virus Total to lookup URLs and get back rich features
4. Identify which features are worth using for prediction
5. Decide on a model to use for prediction
6. Score and evaluate prediction results
7. Use prediction model on new data that has not been identified as malicious