Causal AI DDoS

Started in December 2023

Causal AI is a promising new technology. Drawing conclusions based on correlations only might be misleading. Therefore, we are interested in methods to find the invariant causal relationships. In fact, causal AI aims to identify causes and effects.

https://pcsi.nl/uploads/projects/Causal-AI-DDos-b.png

Project proposal

In our explorations and further understanding of causal AI, we focus on the use case of layer 7 (L7) DDoS. Countering L7 DDoS attacks and their preparations requires a different approach than mitigating volumetric DDoS. The project builds on the knowledge of the previous PCSI project “Crystal Ball DDoS detection”.

Expected gains of the Causal AI DDoS project?

Proactive threat detection • Enhanced defense • Improved decision-making • Universal application • Business continuity.

Why do we want to work on this idea within the PCSI?

Collaborate on the same challenges • Innovate together.

Our use-case: Layer 7 DDoS attacks.

Detects anomalies & their root causes • Alerts with reasons, not just flags • More accurate detection.

Project results

  • Beta-release. We developed the beta version of the Causal AI Detector.
  • Validation experiments. The Pilot partners installed the Causal AI detector in their test environments and validated it using both synthetic L7 DDoS attacks as well as other data sets.

Activities in Extended Pilot phase

  • Increase the capabilities of the Causal AI detector.
  • Perform more validation experiments.
Beeldmerk PCSI
PCSI is een samenwerking van
    ABN-AMRO Achmea ASML Belastingdienst ING TNO