Page 1443 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide

of models of thinking and consciousness.

Typical neural networks involve many layers of summation, each of
which requires weighting information to reflect the relative

importance of the calculation in the overall decision-making process.
The weights must be custom-tailored for each type of decision the
neural network is expected to make. This is accomplished through the
use of a training period during which the network is provided with
inputs for which the proper decision is known. The algorithm then

works backward from these decisions to determine the proper weights
for each node in the computational chain. This activity is performed
using what is known as the Delta rule or learning rule. Through the
use of the Delta rule, neural networks are able to learn from
experience.

Security Applications

Knowledge-based analytic techniques have great applications in the
field of computer security. One of the major advantages offered by
these systems is their capability to rapidly make consistent decisions.
One of the major problems in computer security is the inability of
system administrators to consistently and thoroughly analyze massive
amounts of log and audit trail data to look for anomalies. It seems like
a match made in heaven!