What’s the news:Furthering the entry of Artificial Intelligence (AI) into the cybersecurity space, Google on May 7, 2024, announced the ‘Google Threat Intelligence’ powered by AI-powered agent Gemini 1.5.
According to Google, traditional approaches to operationalizing threat intelligence are labour-intensive and can slow down one’s ability to respond to evolving threats, potentially taking days or weeks to respond.
The company thus collaborated with Mandiant cybersecurity company and the VirusTotal threat intelligence community to come up with its own threat intelligence service.
Customers now can condense large data sets in seconds, quickly analyze suspicious files, and simplify challenging manual threat intelligence tasks,” said Google in the blog post.
Google Threat Intelligence can simplify these reports as well into comprehensive, custom summaries.
What’s the news:
Furthering the entry of Artificial Intelligence (AI) into the cybersecurity space, Google on May 7, 2024, announced the ‘Google Threat Intelligence’ powered by AI-powered agent Gemini 1.5. During the RSA Conference in San Francisco, Google said the intelligence provides conversational search across the vast repository of threat intelligence, enabling customers to gain insights and protect themselves from threats faster than ever before.
According to Google, traditional approaches to operationalizing threat intelligence are labour-intensive and can slow down one’s ability to respond to evolving threats, potentially taking days or weeks to respond. The company thus collaborated with Mandiant cybersecurity company and the VirusTotal threat intelligence community to come up with its own threat intelligence service.
“By combining our… view of the threat landscape with Gemini, we have supercharged the threat research processes, augmented defence capabilities, and reduced the time it takes to identify and protect against novel threats. Customers now can condense large data sets in seconds, quickly analyze suspicious files, and simplify challenging manual threat intelligence tasks,” said Google in the blog post.
Gemini simplifies and assists with threat intelligence:
Gemini 1.5, Google’s latest large language model, makes it easier to reverse engineer malware — “one of the most advanced malware-analysis techniques available to cybersecurity professionals,” said the blog. As an example, it said the integrated AI was able to process “the entire decompiled code of the malware file for WannaCry in a single pass, taking 34 seconds to deliver its analysis and identify the killswitch.”
The intelligence service also provides an entity extraction tool to automate data fusion and enrichment. Moreover, it can automatically crawl the web for relevant open source intelligence (OSINT), and classify online industry threat reporting. Google Threat Intelligence can simplify these reports as well into comprehensive, custom summaries.
The Threat Intelligence then converts this information to knowledge collections, with corresponding hunting and response packs pulled from motivations, targets, tactics, techniques, and procedures (TTPs), actors, toolkits, and Indicators of Compromise (IoCs).
It may be noted that Google is not the first to introduce AI in cybersecurity. Earlier, Microsoft also launched the Copilot for Security, a generative AI-powered security solution that helps defenders improve security outcomes. The service can be used for specific use cases such as summarizing complex security alerts, impact analysis of security incidents, reverse engineering of malware and a step-by-step guide for incident response.
STAY ON TOP OF TECH NEWS: Our daily newsletter with the top story of the day from MediaNama, delivered to your inbox before 9 AM. Click here to sign up today!
Advertisement. Scroll to continue reading.
Also Read:
