Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Threat Intelligence

8/8/2019
03:55 PM
Dark Reading Staff
Dark Reading Staff
Products and Releases
50%
50%

ZeroFOX Expands AI Capabilities to Detect Deepfakes

New video analysis features analyze content and identify risks.

ZeroFOX, the leading provider of advanced artificial intelligence-powered digital risk protection, today announced the latest evolution of its artificial intelligence (AI) capabilities with the release of new video analysis features. The initial use case for this AI-based analysis is the detection of deepfake videos – an emerging threat that can be leveraged in misinformation campaigns. In addition to deepfake detection, ZeroFOX is donating Deepstar, a new open source toolkit to help research teams and the greater cybersecurity community tackle the new threat posed by deepfakes and enhance the accuracy and scale at which these detection capabilities must operate.

Attackers are increasingly adopting advanced image-based techniques to evade traditional text, link and file analysis-based security solutions. ZeroFOX’s new ensemble of AI-enabled computer vision and video analysis features eliminate the manual, time-intensive process of analyzing millions of images and videos that pose significant threats to brands and businesses.

“The challenge of protecting organizations from digital risks is becoming more difficult every day. Attackers are now composing and manipulating videos, and leveraging images, in ways that evade the detection capabilities of legacy solutions,” said James C. Foster, CEO of ZeroFOX. “Over the past several years, we’ve been committed to harnessing the power of AI and applying it to the detection and remediation of modern digital risks. From OCR to image identification, and now advanced video analysis, we are able to efficiently and effectively identify and remediate critical risks at global scale.”

Social media and other digital platforms have rapidly increased the creation and dissemination of image and video-based content. Bad actors have taken advantage of these mediums, posting threatening images prior to physical attacks, and posting images of cash and credit cards to conduct scams and make money off legitimate financial institutions. What’s more, the rise of deepfakes promises to further weaponize misinformation through altered videos. With the introduction of these advanced AI capabilities, ZeroFOX is equipping teams with the ability to identify new threats, recognize brand infringement or impersonations and remediate malicious or threatening content.

Expansion into AI-Powered Video Analysis
ZeroFOX is a pioneer in leveraging AI to provide customers with advanced solutions to modern threats. In the past year, the team has introduced new AI capabilities, including technologies such as text analysis (sentiment analysis, NLP) and image analysis (object detection and image comparison). With the introduction of the new video analysis capabilities, ZeroFOX is providing solutions that can analyze content and identify risks at scale across mediums. Benefits offered by the new capabilities include:

  1. Analyze threats in images and videos
  2. Identify and remove threatening images or leaked credit card information
  3. Detect deepfakes

Combating and Understanding Deepfakes
At Black Hat 2019 in Las Vegas, Nevada, ZeroFOX’s CTO, Mike Price and Principal Research Engineer, Matt Price are discussing how deepfakes can be leveraged for offensive and defensive purposes in their session, “Playing Offense and Defense with Deepfakes.” The team is announcing the release of a new open source deepfake toolkit, called Deepstar, significantly reducing the time and toil required to produce deepfake detection capabilities. Deepstar includes code for automating the creation of deepfake datasets, testing and enhancement of detection algorithms, along with a curated library of deepfake and real videos from YouTube. The toolkit incorporates a plug-in framework, enabling researchers to easily test or re-train and compare the performance of different classifiers. This is an important toolkit that enables researchers and the greater cybersecurity community to build and improve defensive capabilities.

“Today, anybody can download software to produce a deepfake video. As a result, deepfakes are cheap and easy to create and we expect bad actors will take advantage of these economics for nefarious activities,” said Mike Price, CTO of ZeroFOX. “With the release of Deepstar, researchers and defenders will have an additional tool in their toolkit to assist in streamlining the process of deepfake detection research. With the likely abuse of deepfakes as part of an effort to misinform the public, we felt it was important to contribute our toolkit back to the community that has already done some great work, and to help defenders improve their ability to prepare for future challenges in this area.”

To learn more about Deepstar, please visit our blog: www.zerofox.com/blog/detecting-defending-against-deepfakes.

About ZeroFOX

ZeroFOX, the social media & digital security category leader, protects modern organizations from dynamic security, brand and physical risks across social, mobile, web and collaboration platforms. Using diverse data sources and artificial intelligence-based analysis, ZeroFOX protects modern organizations from targeted phishing attacks, credential compromise, data exfiltration, brand hijacking, executive and location threats and more. The patented ZeroFOX SaaS platform processes and protects millions of posts, messages and accounts daily across the social and digital landscape, spanning LinkedIn, Facebook, Slack, Twitter, Instagram, Pastebin, YouTube, mobile app stores, the deep & dark web, domains and more.

Led by a team of information security and high-growth company veterans, ZeroFOX has raised over $100M in funding from NEA, Highland Capital, Silver Lake Waterman, Redline Capital and others, and has collected top industry awards such as Red Herring Top 100 North America, the SINET16 Champion, Dark Reading’s Top Security Startups to Watch, Tech Council of Maryland’s Technology Company of the Year and the Security Tech Trailblazer of the Year.

To find out more information about ZeroFOX or to join our team, please visit: https://www.zerofox.com/.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
DevSecOps: The Answer to the Cloud Security Skills Gap
Lamont Orange, Chief Information Security Officer at Netskope,  11/15/2019
Attackers' Costs Increasing as Businesses Focus on Security
Robert Lemos, Contributing Writer,  11/15/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Navigating the Deluge of Security Data
In this Tech Digest, Dark Reading shares the experiences of some top security practitioners as they navigate volumes of security data. We examine some examples of how enterprises can cull this data to find the clues they need.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-6852
PUBLISHED: 2019-11-20
A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions), which could cause the disclosure of FTP har...
CVE-2019-6853
PUBLISHED: 2019-11-20
A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum (models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and 9702) , which could enable a successful Cross-site Scripting (XSS attack) when using the products web server.
CVE-2013-2092
PUBLISHED: 2019-11-20
Cross-site Scripting (XSS) in Dolibarr ERP/CRM 3.3.1 allows remote attackers to inject arbitrary web script or HTML in functions.lib.php.
CVE-2013-2093
PUBLISHED: 2019-11-20
Dolibarr ERP/CRM 3.3.1 does not properly validate user input in viewimage.php and barcode.lib.php which allows remote attackers to execute arbitrary commands.
CVE-2015-3166
PUBLISHED: 2019-11-20
The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 does not properly handle system-call errors, which allows attackers to obtain sensitive information or have other unspecified impact via unknown vectors, as d...