Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Threat Intelligence

8/8/2019
03:55 PM
Dark Reading Staff
Dark Reading Staff
Products and Releases
50%
50%

ZeroFOX Expands AI Capabilities to Detect Deepfakes

New video analysis features analyze content and identify risks.

ZeroFOX, the leading provider of advanced artificial intelligence-powered digital risk protection, today announced the latest evolution of its artificial intelligence (AI) capabilities with the release of new video analysis features. The initial use case for this AI-based analysis is the detection of deepfake videos – an emerging threat that can be leveraged in misinformation campaigns. In addition to deepfake detection, ZeroFOX is donating Deepstar, a new open source toolkit to help research teams and the greater cybersecurity community tackle the new threat posed by deepfakes and enhance the accuracy and scale at which these detection capabilities must operate.

Attackers are increasingly adopting advanced image-based techniques to evade traditional text, link and file analysis-based security solutions. ZeroFOX’s new ensemble of AI-enabled computer vision and video analysis features eliminate the manual, time-intensive process of analyzing millions of images and videos that pose significant threats to brands and businesses.

“The challenge of protecting organizations from digital risks is becoming more difficult every day. Attackers are now composing and manipulating videos, and leveraging images, in ways that evade the detection capabilities of legacy solutions,” said James C. Foster, CEO of ZeroFOX. “Over the past several years, we’ve been committed to harnessing the power of AI and applying it to the detection and remediation of modern digital risks. From OCR to image identification, and now advanced video analysis, we are able to efficiently and effectively identify and remediate critical risks at global scale.”

Social media and other digital platforms have rapidly increased the creation and dissemination of image and video-based content. Bad actors have taken advantage of these mediums, posting threatening images prior to physical attacks, and posting images of cash and credit cards to conduct scams and make money off legitimate financial institutions. What’s more, the rise of deepfakes promises to further weaponize misinformation through altered videos. With the introduction of these advanced AI capabilities, ZeroFOX is equipping teams with the ability to identify new threats, recognize brand infringement or impersonations and remediate malicious or threatening content.

Expansion into AI-Powered Video Analysis
ZeroFOX is a pioneer in leveraging AI to provide customers with advanced solutions to modern threats. In the past year, the team has introduced new AI capabilities, including technologies such as text analysis (sentiment analysis, NLP) and image analysis (object detection and image comparison). With the introduction of the new video analysis capabilities, ZeroFOX is providing solutions that can analyze content and identify risks at scale across mediums. Benefits offered by the new capabilities include:

  1. Analyze threats in images and videos
  2. Identify and remove threatening images or leaked credit card information
  3. Detect deepfakes

Combating and Understanding Deepfakes
At Black Hat 2019 in Las Vegas, Nevada, ZeroFOX’s CTO, Mike Price and Principal Research Engineer, Matt Price are discussing how deepfakes can be leveraged for offensive and defensive purposes in their session, “Playing Offense and Defense with Deepfakes.” The team is announcing the release of a new open source deepfake toolkit, called Deepstar, significantly reducing the time and toil required to produce deepfake detection capabilities. Deepstar includes code for automating the creation of deepfake datasets, testing and enhancement of detection algorithms, along with a curated library of deepfake and real videos from YouTube. The toolkit incorporates a plug-in framework, enabling researchers to easily test or re-train and compare the performance of different classifiers. This is an important toolkit that enables researchers and the greater cybersecurity community to build and improve defensive capabilities.

“Today, anybody can download software to produce a deepfake video. As a result, deepfakes are cheap and easy to create and we expect bad actors will take advantage of these economics for nefarious activities,” said Mike Price, CTO of ZeroFOX. “With the release of Deepstar, researchers and defenders will have an additional tool in their toolkit to assist in streamlining the process of deepfake detection research. With the likely abuse of deepfakes as part of an effort to misinform the public, we felt it was important to contribute our toolkit back to the community that has already done some great work, and to help defenders improve their ability to prepare for future challenges in this area.”

To learn more about Deepstar, please visit our blog: www.zerofox.com/blog/detecting-defending-against-deepfakes.

About ZeroFOX

ZeroFOX, the social media & digital security category leader, protects modern organizations from dynamic security, brand and physical risks across social, mobile, web and collaboration platforms. Using diverse data sources and artificial intelligence-based analysis, ZeroFOX protects modern organizations from targeted phishing attacks, credential compromise, data exfiltration, brand hijacking, executive and location threats and more. The patented ZeroFOX SaaS platform processes and protects millions of posts, messages and accounts daily across the social and digital landscape, spanning LinkedIn, Facebook, Slack, Twitter, Instagram, Pastebin, YouTube, mobile app stores, the deep & dark web, domains and more.

Led by a team of information security and high-growth company veterans, ZeroFOX has raised over $100M in funding from NEA, Highland Capital, Silver Lake Waterman, Redline Capital and others, and has collected top industry awards such as Red Herring Top 100 North America, the SINET16 Champion, Dark Reading’s Top Security Startups to Watch, Tech Council of Maryland’s Technology Company of the Year and the Security Tech Trailblazer of the Year.

To find out more information about ZeroFOX or to join our team, please visit: https://www.zerofox.com/.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Oldest First  |  Newest First  |  Threaded View
I 'Hacked' My Accounts Using My Mobile Number: Here's What I Learned
Nicole Sette, Director in the Cyber Risk practice of Kroll, a division of Duff & Phelps,  11/19/2019
TPM-Fail: What It Means & What to Do About It
Ari Singer, CTO at TrustPhi,  11/19/2019
Ransomware Surge & Living-Off-the-Land Tactics Remain Big Threats
Jai Vijayan, Contributing Writer,  11/19/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Navigating the Deluge of Security Data
In this Tech Digest, Dark Reading shares the experiences of some top security practitioners as they navigate volumes of security data. We examine some examples of how enterprises can cull this data to find the clues they need.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-19227
PUBLISHED: 2019-11-22
In the AppleTalk subsystem in the Linux kernel before 5.1, there is a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client, aka CID-9804501fa122.
CVE-2019-10203
PUBLISHED: 2019-11-22
PowerDNS Authoritative daemon , all versions pdns 4.1.x before pdns 4.1.10, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave leads to DoS.
CVE-2019-10206
PUBLISHED: 2019-11-22
ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by expanding them from templates as they could contain special characters. Passwords should be wrapped to prevent templates trigger and exposing them.
CVE-2018-10854
PUBLISHED: 2019-11-22
cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in CloudForms's v2v infrastructure mapping delete feature. A stored cross-site scripting due to improper sanitization of user input in Name field.
CVE-2019-13157
PUBLISHED: 2019-11-22
nsGreen.dll in Naver Vaccine 2.1.4 allows remote attackers to overwrite arbitary files via directory traversal sequences in a filename within nsz archive.