A video series on the Science of Security (SoS) with Cybersecurity Scientist Shawn Riley Recorded - Tuesday, December 12, 2018 Topics in this video.... What is Science? What is Cybersecurity Science? Operational Cyber Defense Knowledge Three Sources of Knowledge Symbolic AI & Non-symbolic AI 4 Types of Knowledge Models Cognitive Playbooks – Experience Claim Evidence Reasoning – Argumentation Comparing Symbolic AI & Non-symbolic AI

1. Talking SoS
•A video series on the
Science of Security (SoS)
•With Shawn Riley

2. Cybersecurity Science & Symbolic AI
► What is Science?
► What is Cybersecurity Science?
► Operational Cyber Defense Knowledge
► Three Sources of Knowledge
► Symbolic AI & Non-symbolic AI
► 4 Types of Knowledge Models
► Cognitive Playbooks – Experience
► Claim Evidence Reasoning – Argumentation
► Comparing Symbolic AI & Non-symbolic AI

3. Science is about making sense of the evidence

4. ► Security science is taken to mean a body of knowledge containing laws, axioms
and provable theories relating to some aspect of cyber security. Security science
should provide an understanding of what is possible in the security domain, by
providing objective and qualitative or quantifiable descriptions of security
properties and behaviors. The notions embodied in security science should have
broad applicability - transcending specific systems, attacks, and defensive
mechanisms.
► There are a set of 7 core themes that together form the foundational basis for
security science discipline. The themes are strongly interrelated, and mutually
inform and benefit each other. They are: Common Language, Core Principles,
Attack Analysis, Measurable Security, Risk, Agility, and Human Factors.
What is Cybersecurity Science?

5. Operational Cyber Defense Knowledge

6. There Are Three Sources of Knowledge
• Deductive Inference - Deductive
Inference establishes new facts from
existing facts. Top-Down Method
• Communication - Communication
relays information found using other
methods.
• Inductive Inference - Inductive
Inference establishes new facts
from data. Bottom-Up Method

7. Symbolic AI (Top-Down) & Non-Symbolic AI (Bottom-Up)
• Deductive Inference -
Deductive Inference establishes
new facts from existing
facts. Top-Down Method
• Communication -
Communication relays
information found using other
methods.
• Inductive Inference -
Inductive Inference
establishes new facts from
data. Bottom-Up Method
Symbolic AI / Top-Down
Non-Symbolic AI / Bottom-Up

9. Cognitive Playbook – Human Expert ‘Experience’

10. Claim Evidence Reasoning
Definition – What is it? How should we define it?
Fact – Did it happen? Does it exist?
Value – Is it good or bad? What should be our
criteria for deciding?
Policy – What should we do about it? What
should be our future course of action?
Cause & Effect - What caused it? What are its
effects?

11. Artificial Intelligence (AI)
Symbolic AI
Knowledge Engineering
Expert System
Cognitive Playbooks & Ontologies
Deductive Inference & Contextual Reasoning
Validation of Hypotheses & Explanation
Transparent & Explainable
Non-symbolic AI
Data Science
Machine Learning
Algorithms & Models
Inductive Inference & Probabilistic Reasoning
Predictions & Tentative Hypotheses
Black Box
Comparing Symbolic AI & Non-symbolic AI

12. Thanks for your time!
See you next time!