1. Enterprise Immune Systems Machine-learning and probability theory for detecting in-progress attacks Dave Palmer, Director of Technology

2. Darktrace World-leading MathematicsGovernment Intelligence ExpertsEnterprise Immune System

3. Darktrace in your security stack

4. Enterprise Immune System Unsupervised machine learning Develops mathematical models of normal behavior Correlation & behavioral analysis For every individual user, device and network Inside-out view Complete analysis and visibility of network traffic Real-time & long-running Analyzes behavior over long periods of time, with real-time and historical playback Visualization and investigation Auto-classification of threats, supporting workflow, and collaboration

5. Technology Architecture

6. Usability of mathematics to non mathematicians (live demo)

9. Can identity be believed?

10. “Policy & Compliance module” Labels of behaviour Backward compatibility: “Tag” groups Disciplinary watchlist Known-leavers watchlist Recurring security incidents Social-media/cloud usage Unencrypted dataflows Unofficial infrastructure usage Etc.

12. Thank You! dave@darktrace.com