Cisco AL and ML for Endpoint Analytics and Detecting Spoofing Attacks

JP Vasseur PhD, Cisco Fellow and head of ML and Data Science engineering, presents an advanced use case for machine learning in network security. He discusses clustering using machine learning and how Cisco can measure the efficacy of the results in terms of purity, percentage of unassigned, number of clusters, speed of unknowns resolution, and stability. He then gives a sneak peek at what comes next: Detecting spoofing attacks with ML/AI. ML is an excellent tool for detecting anomalies, and Vasseur presents a specific mechanism to accomplish this using ML instead of complex rules.