WHITE PAPER

Driving Efficiency in
Cyberspace Through AI

i
WHITE PAPER | Driving Efficiency in Cyberspace Through AI

Current State of Cybersecurity

Global businesses face a severe drought of skilled cybersecurity professionals, while
cybercrime and cyberattacks are growing exponentially, threatening even the most
astute organizations. IBM security research, Cost of a Data Breach Report 2021,
states a 10 percent increase in the average total cost of a breach in 2020-2021 (from
$3.86 million to $4.24 million). Additionally, on average it took 287 days to identify and
contain a data breach, and the average cost of a ransomware attack reached $4.62
million. Compounding the problem, multiple reports say the cybersecurity skill shortage
and its associated impacts will continue for the next few years. The leading solution
to alleviate this problem is the use of AI and Machine Learning for cybersecurity.

The IBM report reveals that use of AI and automation in cybersecurity significantly
improved business cost by reducing the time between the identification and
containment of the security breach. The security breach cost for organizations with fully
deployed AI and automation was $2.9 million, while it was $6.71 million without these
cybersecurity features (a gap of nearly 80 percent). Acknowledging the importance,
organizations are actively deploying AI-based products, and the trend is increasing
continuously (65 percent in 2021 vs. 59 percent in 2020). Due to the advancement in
the field, the global AI cybersecurity market is expected to reach $46.3 billion by 2027,
with a Compound Annual Growth Rate (CAGR) of 23.6 percent from 2020 to 2027.

Scaling Cybersecurity with AI

Protecting an organization’s cybersecurity assets is a daunting challenge. Security
analysts must continuously monitor, analyze, correlate, and react to the volume
of alerting data to uncover critical insights about cyber vulnerabilities, suspicious
behavior, and potential attacks. Such a vast amount of data is often overwhelming
to already overwhelmed security experts. This is where AI/ML comes into play.

AI can typically be used in large-traffic analysis, threat hunting, malware,

insider threat, spam and fraud detection, vulnerability management, asset
inventory, security task automation, phishing, and much more.

The use of AI in cybersecurity allows organizations to detect, discover,

predict, and respond to cyberthreats in real-time using machine and
deep learning. AI automates manual and repetitive tasks that would
otherwise be left for humans. This automation enables the security team
to focus time on investigations that require higher level thinking.

As AI and ML grew to be a desirable way to protect organizations against cyberattacks

and other security threats, many cybersecurity companies have emerged in the market
with a specific single algorithm focus on using AI and ML, but DataRobot’s unique,
algorithm agnostic approach provides a significant benefit for large organizations.

1
WHITE PAPER | Driving Efficiency in Cyberspace Through AI

DataRobot AI Cloud Platform

DataRobot AI Cloud Platform is the culmination of nearly
a decade of pioneering AI innovation, representing 1.5
million engineering hours to bring this solution to market.
We refined this platform through the success of a million
active projects deployed on DataRobot around the world.
The newly released DataRobot Cloud AI platform is uniquely
designed for today’s challenges and opportunities. But even
more, this is the foundation upon which the next generation
of intelligent business will be built.

DataRobot AI Cloud Platform is available in the cloud, on-

premise, or as a fully managed AI service to help security

With AI Cloud analysts tackle data-driven challenges, prioritize risks,

stay ahead of threats, and deliver greater impact without

Platform, security needing to invest in additional data science experts.

analysts can easily • On-site deployment: DataRobot is deployable on-

premises in a secure data center in freestanding
build models to clusters or Hadoop. DataRobot also integrates natively
with Cloudera.
analyze user and • Cloud deployment through GovCloud and C2S:
network activity, learn DataRobot meets the U.S. Government’s Intel Community

and adapt to emerging

(IC) C2S cloud requirements. DataRobot is also in
the process of FedRamp medium guidelines.

threats, and quickly With AI Cloud Platform, security analysts can easily

anticipate attacks.
build models to analyze user and network activity, learn
and adapt to emerging threats, and quickly anticipate
attacks. More importantly, it presents accurate and
actionable insights in a human-interpretable way.

DataRobot harnesses the power of machine

learning to do tasks automatically and drive better
business outcomes with the following features:

• Automated data preparation: DataRobot uses

information about data and business problems to
precisely select the right mix of machine learning
algorithms to test.

• Automated feature engineering: DataRobot

automatically preprocesses data for best results with the
technique to be tested.

2
WHITE PAPER | Driving Efficiency in Cyberspace Through AI

• Automated machine learning: DataRobot learns from data

using different techniques, validates what it learns with
experimental data, and displays the results so analysts can
choose the best predictive model for their data.

• Time Series Anomaly Detection: Unsupervised machine

learning workflow allows users to detect anomalies
DataRobot proactively without specifying a target variable.
monitors employees’ • Automated deployment: DataRobot offers a real-time
behavior, detects any prediction engine and a batch prediction engine for Hadoop.
anomalous activities, and
• Automated Model Health Monitoring and Lifecycle
identifies precursors to
Management: MLOps provides constant monitoring and
malicious or risky actions. production diagnostics to improve the performance of
Moreover, DataRobot existing models.
provides granular
The following use cases can be implemented using DataRobot:
information about users
that allows the organization • Predict and prevent network intrusions: With
to detect possible insider DataRobot, analysts can easily build models to analyze
threats, immediately respond network and user activity, detect various patterns in
data, and learn and adapt to evolving threats, which
to risky data access, and
allows the Security Operation Center (SOC) to automate
contain the threat before
the response and proactively protect the endpoint
damage is done. before malware and ransomware can do any harm.

• Thwart insider threats: DataRobot proactively monitors

employees’ behavior, detects any anomalous activities,
and identifies precursors to malicious or risky actions.
Moreover, DataRobot provides granular information about
users that allows the organization to detect possible
insider threats, immediately respond to risky data
access, and contain the threat before damage is done.

• Accelerate SOC operations: DataRobot accelerates

the process of building, deploying, and managing
predictive models to get the most out of valuable data.
With DataRobot, the SOC team can quickly automate
the discovery of new attacks, develop and deploy
models that identify suspect devices or activities,
identify dangerous behavior before a breach, devise
new defenses, and strengthen their response. It allows
experts to focus their attention where it matters most,
avoid chasing a massive volume of false positives, and
apply powerful predictions to drive smart decisions.

3
WHITE PAPER | Driving Efficiency in Cyberspace Through AI

• Improve detection accuracy: DataRobot enables

organizations to run datasets through a number of
proven models simultaneously in seconds to find
the most accurate predictive model for the data.

• Reduce project delivery time: Traditional data science

projects can take significant time to complete. With
DataRobot, the entire cycle of developing, validating,
and deploying predictive models that empower data-
driven decisions is automated in days rather than
months. Moreover, DataRobot ensures that best
practices are consistently followed at every step, from
automated data preparation and feature engineering to
automatic model selection and training and testing.

• Communicate complex issues in a human-readable

way: DataRobot provides fully explainable results
through easy-to-read visual insights to leadership
and key stakeholders. Furthermore, analysts can
evaluate any model using DataRobot’s Lift Chart,
ROC Curve, Confusion Matrix, and more.

Conclusion
As gaps in the cyber workforce have left organizations
vulnerable to a ripple effect of cybercrime, utilizing AI and
machine learning can improve efficiencies and reduce
manpower gaps. More specifically, DataRobot’s AI Cloud
Platform enables security professionals to take greater
predictive action through easy to load and test AI models
that can move from generation to deployment with little
to no code. AI and ML are not a complete problem solver,
but through integration of data sets and deployment to
production servers, DataRobot ultimately drives more rapid,
better decision-making capabilities to secure organizations
against the rising tide of adversarial cyber activity.

4
WHITE PAPER | Driving Efficiency in Cyberspace Through AI

DataRobot helps enterprises embrace artificial intelligence (AI). Invented by

DataRobot, automated machine learning enables organizations to build predictive
models that unlock value in data, making machine learning accessible to business
analysts and allowing data scientists to accomplish more faster. With DataRobot,
organizations become AI-driven and are enabled to automate processes, optimize
outcomes, and extract deeper insights.

Learn more at datarobot.com

This document (“Materials”) may include forward-looking statements related to the future growth of DataRobot.
Notwithstanding, the forward-looking statements contained herein, the Materials are not a guarantee of future
products features and should not be relied upon in making any purchasing decisions. Actual product results may
vary due to changes in DataRobot and customer technologies, and other factors. The Materials are for informational
purposes only and shall not be construed as a guarantee of specific outcomes. DataRobot will not be liable to
customers for any costs, expenses, or losses suffered or incurred by customers as a result of it relying on any
forward-looking statements.

© 2021 DataRobot, Inc. All rights reserved. DataRobot and the DataRobot logo are trademarks of DataRobot, Inc.
v10222021.0833
All other marks are trademarks or registered trademarks of their respective holders. 5