EPSRC DTP studentship in Cyber Security Analytics: Automated Cyber Defence (with Airbus)

我们生活在一个数字互联性不断增强的世界，并正在迅速向无处不在的自主系统发展。最近“想哭”（WannaCry）等大规模网络攻击表明，失控的攻击对联网计算机系统的破坏性影响。虽然这个例子可以通过保持系统更新来防止，但我们不可避免地会看到更多智能且难以防御的自动化攻击。自动化网络防御博士学位将建立在卡迪夫大学与空中客车公司之间的长期合作基础上，以及我们最近对网络攻击早期检测的突破性研究-看到勒索软件在4秒内被检测到，并将文件系统损坏减少80%以上。博士学位将寻求为“游戏式”网络攻击和防御方法的发展奠定基础，根据攻击的背景，捕捉企业网络攻击的早期预警信号，并通过选择适当的自动防御机制“学习如何防御”。这个命题的核心将是攻击和防御战术的创新，以及围绕如何选择合适的自动响应迫在眉睫的攻击的人工逻辑和智能。我们正在寻找一个开放的思想，有创造力的个人加入我们的团队，开发世界级的研究成果与工业应用。您将加入卡迪夫大学ESPRC网络安全分析DTP中心，成为跨学科学生群体的一员，在网络安全背景下研究人工智能的人类和算法方面。目标：i)开发方法来自动对企业网络进行漏洞测试，并针对这些漏洞编排一系列攻击ii)开发方法来学习如何以负责任，可审计和可解释的方式实时战略性地保护网络及其设备免受一系列日益复杂的攻击。潜在影响成功的候选人将在卡迪夫/空中客车研究团队的纽波特办公室（距离大学20分钟）工作一周的一部分时间。这将使您能够确定与在业务中部署自动化网络防御新方法相关的因素，并与价值800万英镑的空中客车网络实验室计划保持一致，该计划将下一代网络防御作为核心研究主题。所有这些结合起来，你就有机会将你的研究成果转化为空客的新产品和新工艺。

We live in a world of ever-increasing digital interconnectivity and are rapidly moving towards pervasive autonomous systems. Recent widespread cyber attacks such as WannaCry demonstrate the devastating impact an out-of-control attack can have on networked computer systems. While this example could have been prevented by keeping systems up to date, we are inevitably going to see more automation of attacks that are intelligent and difficult to defend against.The PhD studentship in Automated Cyber Defence will build on the long standing collaboration between Cardiff University & Airbus, and our recent ground-breaking research into the early-detection of cyber attacks - seeing ransomware detected within 4 seconds, and reducing file system damage by over 80%. The PhD will seek to lay foundations in the development of "game playing" cyber attack and defence methods, to pick up the early warning signs of an attack on enterprise networks and "learn how to defend" by selecting appropriate automated defence mechanisms, depending on the context of the attack. Core to this proposition will be innovation in representing attack and defence tactics, and artificial logic and intelligence around how to select a suitable automated response to imminent attacks. We are seeking an open minded, creative individual to join the team and develop world class research outcomes with industrial applications. You will join the ESPRC DTP Hub in Cyber Security Analytics at Cardiff University, becoming part of an interdisciplinary cohort of students studying the human and algorithmic aspects of AI in the context of cybersecurity.Objectives:i) develop methods to automatically vulnerability-test an enterprise network and orchestrate a set of attacks against these vulnerabilitiesii) develop methods to learn how to strategically defend the network and its devices against a range of increasingly complex attacks in real-time in a responsible, auditable and explainable manner.Potential impactThe successful candidate will be embedded within the Cardiff/Airbus research team at their Newport offices (20 mins from the University) for part of your working week. This will enable you to determine the factors associated with the deployment of new methods for automated cyber defence within the business, and also to align with the £8m Airbus Cyber Lab programme, which includes next generation cyber defence as a core research theme. All combined, the opportunity is to translate the outcomes from your research into new products and processes at Airbus.