Predict and Prevent Threats

ZeroEgo — Teaching machines to talk like a hacker so we can mine social media to predict Zero Day Vulnerabilities and Exploits.

The Zero index is the first index position in an array.  It is the hacker / source of information with the most respect (I.e., the lowest amount of “ego” = extent to which your hype exceeds your abilities).

We will find the hackers and sources of information with the highest respect by “reverse engineering” the most respected sources of information about exploits and vulnerabilities (e.g., the common exploit database and NIST exploit database, exploitDB, etc.)

We will then use this information to mine social media (e.g., twitter, Facebook, freenode chat, etc.) to find the keywords used to talk about somebody’s work on a zero day exploit, and the language used to indicate respect (e.g., pwn or exploit or 0day and “very cool”).  We use sentiment analysis to rate the hackers and keywords.

We are writing a plugin for maltego to enhance it’s social media analysis capabilities by  using natural language processing (e.g., HavenOnDemand or Azure).

The front-end interface could be built using a simple WordPress forms builder for the demo, showing a tabbed interface with:

1. Company / Product tab so a company can set what they want to search for (e.g., microsoft windows 7)
2. Upload a file of exploits / vulnerabilities from sources (e.g., exploitDB, or CSV / XML from NVD or CVE) so we can search for known zero days to “train the machine”
3. Analysis of social media to find 
   1. The keywords that were the best predictors
   2. the hackers and social media streams that were the best predictors of the exploits / vulnerability
4. Tabs that lets the company use human cognitive processing to improve results by adding
   1. Hackers
   2. Kewords
5. Export the information from this front-end to something that builds the array to feed the ZeroEgo Engine which
   1. Tells us the most respected hackers, keywords and sources of information
   2. Continuously mines social media to use info from #5.a predict exploits / vulnerabilities
6. Dashboard so company so see 
   1. Red, Yellow, Green of whether there is an increase of positive sentiment chatter from the most respected sources
   2. Metrics to see how well the engine is working, e.g.,
      1. Number of social media entries analyzed
      2. How many hits were found
      3. ZeroEgo ratings for hackers, keywords and sources by company / product
7. Maltego maps the relationships and builds casefiles for companies, hackers and keywords for further analysis

Beautiful User Interface

Etiam rhoncus fermentum vehicula. Etiam sollicitudin eget sapien ac aliquet. Nullam triue vitae sem a facilisis. Donec quis dapibus tellus mauris fermentum saditip ipsums dolores ametis.

• Lorem ipsum sits dolores unser et.
• Duis in ipsumil magna tristique.
• Quisque id nibh et nibh luctus placeri.
• Integer elementumi at elit faucius.
• Nullam et nisl ac nisi viverra gravida.
• Donec efficitur et roncus quam.
• Donec non leo rhon hendrerit turpis.