Machine Learning. Literally.

1. Machine learning.
Literally. Göran Sandahl
Co-founder, CTO
@gsandahl
goran@unomaly.com

2. “Less than
1% of data
is
analysed”
(idc)
Stuxnet
attack
graph

3.
Black Box
The foundational issue
IT systems are black
boxes
?
?
? ? ?
3
Breaches
CrashesFailures
Changes
20%
of IT time spent on
troubleshooting
IT Process Institute
69%
of security incidents
discovered by 3rd
parties
Verizon Breach Report, 2013
Growing
pressure from
legislation, compliance
etc

4. Every system produces data.
Every incident creates new.
Systems
Continually learns
what’s normal
D
B
Events
Profiles
§
Relevance
Algorithm
Universally
uncovers new data
in
u
Memory Controller Read Error on Ch
S
y
s
S
y
s
S
y
s
S
y
s
S
y
s
Send any data
from any system
STREAMING
DATA
Legacy
Cloud
Custom
Emerging
100%
coverage
100%
automation
99.999%
data reduction
4

5. One focal point and ground truth
for all stakeholders
sup
sec
net
dev
ops
app
What’s different?
Faster mean
time to detect,
repair and
recover
Reduced risk,
guesswork and
troubleshooting
Improved
communication
and
collaboration
Enhanced
organisational
learning

6. "Even the most advanced hacker will leave traces in log
data" Gartner, Anton Chuvakin
Thank you.