Symantec Adds Deep Learning to Anti-Malware Tools to Detect Zero-Days
NEWS ANALYSIS: Android versions of Symantec mobile security products are the first to include deep learning, but the access to this big data approach will soon spread to other platforms.Deep learning may be the next frontier for a security industry that's dealing with constant attacks from cyber-criminals who become more sophisticated by the day. According to a Symantec executive, the company has been working to integrate the whole idea of machine learning into its security services since February 2015. Symantec asserts that the capability, as new as it is, may be the next critical technology to keep cyber-attacks at bay. Until recently, deep learning has been locked away in the software development labs. A few companies have realized that they can spot malware by its components and its behavior to ferret out most zero-day attacks before they have a chance to cause damage. Because of this, deep learning is now being deployed on the cyber-security battleground. "As a user, you can't afford a bad download, and that's where we need to focus," said Andrew Gardner, senior technical director of machine learning at Symantec, to explain why the company first focused its efforts on Android. "That's what deep learning let us do."
Gardner said that most of the malware files in the Android environment are known, but at any given time two to five percent of the malware in circulation represent what he called low-scoring threats that are often missed by malware scanners. These include zero-day attacks.