Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Threat Intelligence

8/8/2019
03:55 PM
Dark Reading Staff
Dark Reading Staff
Products and Releases
50%
50%

ZeroFOX Expands AI Capabilities to Detect Deepfakes

New video analysis features analyze content and identify risks.

ZeroFOX, the leading provider of advanced artificial intelligence-powered digital risk protection, today announced the latest evolution of its artificial intelligence (AI) capabilities with the release of new video analysis features. The initial use case for this AI-based analysis is the detection of deepfake videos – an emerging threat that can be leveraged in misinformation campaigns. In addition to deepfake detection, ZeroFOX is donating Deepstar, a new open source toolkit to help research teams and the greater cybersecurity community tackle the new threat posed by deepfakes and enhance the accuracy and scale at which these detection capabilities must operate.

Attackers are increasingly adopting advanced image-based techniques to evade traditional text, link and file analysis-based security solutions. ZeroFOX’s new ensemble of AI-enabled computer vision and video analysis features eliminate the manual, time-intensive process of analyzing millions of images and videos that pose significant threats to brands and businesses.

“The challenge of protecting organizations from digital risks is becoming more difficult every day. Attackers are now composing and manipulating videos, and leveraging images, in ways that evade the detection capabilities of legacy solutions,” said James C. Foster, CEO of ZeroFOX. “Over the past several years, we’ve been committed to harnessing the power of AI and applying it to the detection and remediation of modern digital risks. From OCR to image identification, and now advanced video analysis, we are able to efficiently and effectively identify and remediate critical risks at global scale.”

Social media and other digital platforms have rapidly increased the creation and dissemination of image and video-based content. Bad actors have taken advantage of these mediums, posting threatening images prior to physical attacks, and posting images of cash and credit cards to conduct scams and make money off legitimate financial institutions. What’s more, the rise of deepfakes promises to further weaponize misinformation through altered videos. With the introduction of these advanced AI capabilities, ZeroFOX is equipping teams with the ability to identify new threats, recognize brand infringement or impersonations and remediate malicious or threatening content.

Expansion into AI-Powered Video Analysis
ZeroFOX is a pioneer in leveraging AI to provide customers with advanced solutions to modern threats. In the past year, the team has introduced new AI capabilities, including technologies such as text analysis (sentiment analysis, NLP) and image analysis (object detection and image comparison). With the introduction of the new video analysis capabilities, ZeroFOX is providing solutions that can analyze content and identify risks at scale across mediums. Benefits offered by the new capabilities include:

  1. Analyze threats in images and videos
  2. Identify and remove threatening images or leaked credit card information
  3. Detect deepfakes

Combating and Understanding Deepfakes
At Black Hat 2019 in Las Vegas, Nevada, ZeroFOX’s CTO, Mike Price and Principal Research Engineer, Matt Price are discussing how deepfakes can be leveraged for offensive and defensive purposes in their session, “Playing Offense and Defense with Deepfakes.” The team is announcing the release of a new open source deepfake toolkit, called Deepstar, significantly reducing the time and toil required to produce deepfake detection capabilities. Deepstar includes code for automating the creation of deepfake datasets, testing and enhancement of detection algorithms, along with a curated library of deepfake and real videos from YouTube. The toolkit incorporates a plug-in framework, enabling researchers to easily test or re-train and compare the performance of different classifiers. This is an important toolkit that enables researchers and the greater cybersecurity community to build and improve defensive capabilities.

“Today, anybody can download software to produce a deepfake video. As a result, deepfakes are cheap and easy to create and we expect bad actors will take advantage of these economics for nefarious activities,” said Mike Price, CTO of ZeroFOX. “With the release of Deepstar, researchers and defenders will have an additional tool in their toolkit to assist in streamlining the process of deepfake detection research. With the likely abuse of deepfakes as part of an effort to misinform the public, we felt it was important to contribute our toolkit back to the community that has already done some great work, and to help defenders improve their ability to prepare for future challenges in this area.”

To learn more about Deepstar, please visit our blog: www.zerofox.com/blog/detecting-defending-against-deepfakes.

About ZeroFOX

ZeroFOX, the social media & digital security category leader, protects modern organizations from dynamic security, brand and physical risks across social, mobile, web and collaboration platforms. Using diverse data sources and artificial intelligence-based analysis, ZeroFOX protects modern organizations from targeted phishing attacks, credential compromise, data exfiltration, brand hijacking, executive and location threats and more. The patented ZeroFOX SaaS platform processes and protects millions of posts, messages and accounts daily across the social and digital landscape, spanning LinkedIn, Facebook, Slack, Twitter, Instagram, Pastebin, YouTube, mobile app stores, the deep & dark web, domains and more.

Led by a team of information security and high-growth company veterans, ZeroFOX has raised over $100M in funding from NEA, Highland Capital, Silver Lake Waterman, Redline Capital and others, and has collected top industry awards such as Red Herring Top 100 North America, the SINET16 Champion, Dark Reading’s Top Security Startups to Watch, Tech Council of Maryland’s Technology Company of the Year and the Security Tech Trailblazer of the Year.

To find out more information about ZeroFOX or to join our team, please visit: https://www.zerofox.com/.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio
 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
COVID-19: Latest Security News & Commentary
Dark Reading Staff 9/21/2020
Cybersecurity Bounces Back, but Talent Still Absent
Simone Petrella, Chief Executive Officer, CyberVista,  9/16/2020
Meet the Computer Scientist Who Helped Push for Paper Ballots
Kelly Jackson Higgins, Executive Editor at Dark Reading,  9/16/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Latest Comment: Exactly
Current Issue
Special Report: Computing's New Normal
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
How IT Security Organizations are Attacking the Cybersecurity Problem
How IT Security Organizations are Attacking the Cybersecurity Problem
The COVID-19 pandemic turned the world -- and enterprise computing -- on end. Here's a look at how cybersecurity teams are retrenching their defense strategies, rebuilding their teams, and selecting new technologies to stop the oncoming rise of online attacks.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-4590
PUBLISHED: 2020-09-21
IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a denial of service attack conducted by an authenticated client. IBM X-Force ID: 184650.
CVE-2020-4731
PUBLISHED: 2020-09-21
IBM Aspera Web Application 1.9.14 PL1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188055.
CVE-2020-4315
PUBLISHED: 2020-09-21
IBM Business Automation Content Analyzer on Cloud 1.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the i...
CVE-2020-4579
PUBLISHED: 2020-09-21
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a specially crafted HTTP/2 request with invalid characters. IBM X-Force ID: 184438.
CVE-2020-4580
PUBLISHED: 2020-09-21
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a specially crafted a JSON request with invalid characters. IBM X-Force ID: 184439.