Endpoint Detection and Response: Why Use Machine Learning?

Threats towards the cyberspace have becoming more aggressive, intelligent and some attack at real-time. These urged both researchers and practitioner to secure the cyberspace at the very root point, which refer to as the endpoint. The detection and response at endpoint must be able to protect at real-time as good as the attacker. In this paper, we reviewed the techniques used in endpoint detection and response. We discovered the trend have shifted from the traditional approaches to more intelligent way. Specifically, most proposed techniques focused on machine learnings. We also zoomed into these techniques and outline the advantages of these techniques.