Collaborative Research: SaTC: EDU: Artificial Intelligence Assisted Malware Analysis

利用人工智能（AI）和机器学习（ML）来解决网络安全问题在工业界和学术界受到越来越多的关注，部分原因是为了应对云基础设施、政府办公室或医院等关键系统受到的广泛恶意软件攻击，以及它们产生的大量数据。人工智能和机器学习辅助的网络安全提供了数据驱动的自动化，可以使安全系统实时识别和响应网络威胁。然而，目前在网络安全方面接受过人工智能和机器学习培训的专业人员短缺。该项目将通过开发实验室密集型模块来解决这一不足，使本科生和研究生能够获得将人工智能和机器学习技术应用于现实世界数据集的基础和高级知识，以了解网络威胁情报（CTI）、恶意软件分析和分类，以及网络安全中的其他重要主题。拟议中的项目每年将影响400多名学生，并为不同的学生群体提供独特的机会。田纳西技术大学和北卡罗来纳大学威尔明顿分校位于经济困难地区。曼哈顿学院的学生中有31%是少数族裔（20%是西班牙裔），33%是第一代大学生。此外，该项目建议通过举办研讨会和参加专业会议（如网络安全女性会议、社区学院网络峰会和西班牙裔专业工程师协会）来增加代表性不足群体在STEM中的参与度。为本科生和研究生提供在恶意软件分析中使用人工智能的培训，是弥合当前网络安全人才缺口的重要一步。该项目将在“人工智能辅助恶意软件分析”中开发6个独立的自适应模块。主题将包括：(1)CTI和恶意软件攻击阶段，(2)恶意软件知识表示和CTI共享，(3)恶意软件数据收集和特征识别，(4)人工智能辅助恶意软件检测，(5)恶意软件分类和归因，以及(6)高级恶意软件研究主题和案例研究，如对抗性学习和高级持续威胁（APT）检测。课程模块将被评估和评估，以确定它们对学生的影响。研讨会和研讨会将用于扩大项目的影响，并为学生和爱好者提供使用真实数据集进行人工智能辅助恶意软件分析的实践经验。还将为外部教员安排一个为期两天的培训讲习班，以便进一步传播这些单元。该项目中提出的一系列活动将培训学生、研究人员和专业人员进行人工智能辅助恶意软件分析，并为他们应对未来的网络安全挑战做好准备。该项目由安全与可信网络空间（SaTC）计划支持，该计划资助解决网络安全和隐私问题的提案，在这种情况下，特别是网络安全教育。SaTC项目与《联邦网络安全研究与发展战略计划》和《国家隐私研究战略》保持一致，旨在保护和维护网络系统日益增长的社会和经济效益，同时确保安全和隐私。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The use of Artificial Intelligence (AI) and Machine Learning (ML) to solve cybersecurity problems has been gaining traction within industry and academia, in part as a response to widespread malware attacks on critical systems, such as cloud infrastructures, government offices or hospitals, and the vast amounts of data they generate. AI- and ML-assisted cybersecurity offers data-driven automation that could enable security systems to identify and respond to cyber threats in real time. However, there is currently a shortfall of professionals trained in AI and ML for cybersecurity. This project will address the shortfall by developing lab-intensive modules that enable undergraduate and graduate students to gain fundamental and advanced knowledge in applying AI and ML techniques to real-world datasets to learn about Cyber Threat Intelligence (CTI), malware analysis, and classification, among other important topics in cybersecurity. The proposed project will impact more than 400 students annually and is uniquely poised to provide opportunities to a diverse student population. Tennessee Technical University and University of North Carolina Wilmington are located in economically challenged regions. Manhattan College has a student population that is 31% minority (20% Hispanic) and 33% first generation college students. In addition, this project proposes to increase participation of underrepresented groups in STEM by conducting workshops and participating in professional conferences, such as The Women in Cybersecurity Conference, Community College Cyber Summit, and Society of Hispanic Professional Engineers. Providing undergraduate and graduate students with training in the use of AI in malware analysis is an important step towards bridging the current cybersecurity talent gap. The project will develop six self-contained and adaptive modules in "AI-assisted Malware Analysis." Topics will include: (1) CTI and malware attack stages, (2) malware knowledge representation and CTI sharing, (3) malware data collection and feature identification, (4) AI-assisted malware detection, (5) malware classification and attribution, and (6) advanced malware research topics and case studies such as adversarial learning and Advanced Persistent Threat (APT) detection. The course modules will be evaluated and assessed to determine their impact on students. Workshops and tutorial sessions at conferences will be used to expand the project’s impact and provide students and enthusiasts with hands-on experience of aspects of AI-assisted malware analysis using real-world datasets. A two-day training workshop for external faculty will also be arranged to enable further dissemination of the modules. The suite of activities proposed in this project will train students, researchers, and professionals in AI-assisted malware analysis and prepare them to meet future cybersecurity challenges. This project is supported by the Secure and Trustworthy Cyberspace (SaTC) program, which funds proposals that address cybersecurity and privacy, and in this case specifically cybersecurity education. The SaTC program aligns with the Federal Cybersecurity Research and Development Strategic Plan and the National Privacy Research Strategy to protect and preserve the growing social and economic benefits of cyber systems while ensuring security and privacy.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.