Artificial Intelligence & Machine Learning , Next-Generation Technologies & Secure Development , Threat Intelligence

The Role Generative AI Can Play in Threat Detection

Chen Burshan, the CEO of Skyhawk Security, wants to use the power of generative AI as part of the threat detection flow. "Vendors that have the depth of technology," he said, can "utilize generative AI in the actual security work they're doing right, whatever the product is."

See Also: Corelight's Brian Dye on NDR's Role in Defeating Ransomware

Burshan described how Shyhigh Security has used generative AI to improve detection. "We were able to detect the crown jewels - the assets that customers really want to protect and make sure that there won't be a data breach by exfiltrating data out of them - and we were able to go from these crown jewels back to the perimeter, to make sure that we find the interesting parts, and then use our AI and detectors to identify real threats and events that are progressing on the path to the crown jewels. We were able to use generative AI to understand the context and how to get into the crown jewels and to improve detection," he said.

In this video interview with Information Security Media Group at Black Hat USA 2023, Burshan discussed:

• The need to introduce generative AI into models without introducing errors;
• How organizations with risk management tools in place and risk reduction occurring are still getting breached and therefore need to focus more on threat detection;
• How future use of generative AI for detection will improve response because, "Once you can detect more rapidly, you can respond with more confidence."

Burshan has led product and strategy teams for companies in the security space for more than 10 years. He previously served as vice president of strategy, general manager and site manager at Dome9, which was acquired by Check Point. His journey as a product leader and manager in technology companies began over 20 years ago with roles at IBM and Cisco.