Course Status: In Progress – Fall 2026
———————————————————
Applied Machine Learning in Cybersecurity
This course applies machine learning to real cybersecurity problems, moving from foundational AI/ML concepts through supervised, unsupervised, and deep learning models. Coursework covers spam and malware classification, intrusion detection with ensemble methods, anomaly detection on network traffic, and time-series analysis using LSTM networks. Hands-on projects use real-world datasets in Python, with emphasis on model evaluation, performance tuning, and the ethical and privacy considerations that govern AI-driven security tooling.
🧠 What This Course Demonstrates
This coursework demonstrates the ability to take a security problem, select an appropriate model, train and evaluate it against real data, and interpret the results in operational terms. It bridges the gap between security operations and data science: understanding not just which model to apply, but what its false-positive rate costs a SOC team, why a black-box model creates accountability risk, and where automated detection should defer to human review.
Key Skills & Topics
🤖 Models & Methods
- Supervised classification (k-NN, decision trees, Naive Bayes, logistic regression)
- Ensemble methods (random forests, boosting)
- Unsupervised learning and clustering for anomaly detection
- Neural networks, LSTM, and transfer learning
- Adversarial ML and generative models
📊 Applied Data Science
- Feature engineering, preprocessing, and scaling
- Model evaluation (precision, recall, F1, AUC-ROC, confusion matrix)
- Hyperparameter tuning and cross-validation
- Python stack: scikit-learn, NumPy, pandas, PyTorch, JupyterLab
🔐 Security Applications & Governance
- Spam/phishing, malware, and intrusion detection
- Time-series anomaly detection on traffic and system logs
- Model interpretability and accountability in security decisions
- Privacy, data protection (GDPR, CCPA), and algorithmic bias
Course Materials
Mathematical Foundations of ML Security Models
📐 An analysis of how linear algebra and probability distributions operate inside four machine learning models used in security contexts: Naive Bayes, logistic and softmax regression, neural networks, and Gaussian anomaly detection. Examines tensor representation of feature data, matrix operations underlying model computation, and how Bernoulli and Gaussian distributions shape classification behavior and detection thresholds.
Mod_1_Assignment_Fall2026_CYSE-420_fdMachine Learning for DDoS Detection
🌐 An assessment of how machine learning strengthens cybersecurity defenses, focused on distributed denial-of-service detection. Covers how models identify volumetric and behavioral traffic anomalies that static rule-based systems miss, alongside the practical limitations of deployment: data quality, adversarial evasion, and false-positive cost at scale.
Mod_1_DB_Fall2026_CYSE420