IBM Introduces New Generative AI-Powered Cybersecurity Assistant for Threat Detection and Response Services
IBM has introduced new generative AI capabilities to its managed Threat Detection and Response Services. The IBM Consulting Cybersecurity Assistant, built on the watsonx platform, aims to accelerate and improve the identification, investigation, and response to critical security threats. Key features include:
1. Historical correlation analysis to speed up complex threat investigations, reducing alert investigation times by 48% for one client.
2. A timeline view of attack sequences for better comprehension of critical threats.
3. Auto-recommended actions based on historical patterns and pre-set confidence levels.
4. A generative AI conversational engine providing real-time insights and support on operational tasks.
These advancements are designed to help security teams tackle the challenge of numerous attacks with time and resources, potentially improving overall security posture for clients.
IBM ha introdotto nuove capacità di intelligenza artificiale generativa nei suoi servizi gestiti di Rilevamento e Risposta alle Minacce. L'IBM Consulting Cybersecurity Assistant, costruito sulla piattaforma watsonx, mira ad accelerare e migliorare l'identificazione, l'indagine e la risposta alle minacce di sicurezza critiche. Le caratteristiche principali includono:
1. Analisi di correlazione storica per accelerare le indagini su minacce complesse, riducendo i tempi di indagine degli allerta del 48% per un cliente.
2. Una visione temporale delle sequenze di attacco per una migliore comprensione delle minacce critiche.
3. Azioni raccomandate automaticamente basate su modelli storici e livelli di fiducia predefiniti.
4. Un motore conversazionale di intelligenza artificiale generativa che fornisce approfondimenti e supporto in tempo reale su compiti operativi.
Questi progressi sono progettati per aiutare i team di sicurezza ad affrontare la sfida di numerosi attacchi con tempo e risorse, potenzialmente migliorando la postura di sicurezza complessiva per i clienti.
IBM ha presentado nuevas capacidades de IA generativa en sus servicios gestionados de Detección y Respuesta a Amenazas. El Asistente de Ciberseguridad de IBM Consulting, construido sobre la plataforma watsonx, tiene como objetivo acelerar y mejorar la identificación, investigación y respuesta a amenazas de seguridad críticas. Las características clave incluyen:
1. Análisis de correlación histórica para acelerar las investigaciones de amenazas complejas, reduciendo los tiempos de investigación de alertas en un 48% para un cliente.
2. Una vista cronológica de las secuencias de ataque para una mejor comprensión de las amenazas críticas.
3. Acciones recomendadas automáticamente basadas en patrones históricos y niveles de confianza preestablecidos.
4. Un motor conversacional de IA generativa que proporciona información y soporte en tiempo real sobre tareas operativas.
Estos avances están diseñados para ayudar a los equipos de seguridad a enfrentar el desafío de numerosos ataques con tiempo y recursos, mejorando potencialmente la postura de seguridad general de los clientes.
IBM은 관리되는 위협 탐지 및 대응 서비스에 새로운 생성형 AI 기능을 도입했습니다. watsonx 플랫폼에 구축된 IBM 컨설팅 사이버 보안 어시스턴트는 중요한 보안 위협을 식별, 조사 및 대응하는 과정을 가속화하고 개선하는 것을 목표로 하고 있습니다. 주요 기능은 다음과 같습니다:
1. 과거 상관관계 분석을 통해 복잡한 위협 조사를 가속화하여 한 고객의 경고 조사 시간을 48% 단축합니다.
2. 공격 시퀀스의 타임라인 보기를 제공하여 중요한 위협을 더 잘 이해할 수 있도록 합니다.
3. 과거 패턴 및 사전 설정된 신뢰 수준에 기반한 자동 추천 조치.
4. 운영 작업에 대한 실시간 통찰력과 지원을 제공하는 생성형 AI 대화 엔진.
이러한 발전은 보안 팀이 시간과 자원으로 다수의 공격에 대처하는 데 도움을 주어, 고객의 전반적인 보안 태세를 개선할 수 있도록 설계되었습니다.
IBM a introduit de nouvelles capabilités d'IA générative dans ses services gérés de Détection et Réponse aux Menaces. L'Assistant de Cybersécurité d'IBM Consulting, construit sur la plateforme watsonx, vise à accélérer et améliorer l'identification, l'enquête et la réponse aux menaces de sécurité critiques. Les principales caractéristiques incluent :
1. Analyse de corrélation historique pour accélérer les enquêtes sur les menaces complexes, réduisant les temps d'enquête sur les alertes de 48 % pour un client.
2. Une vue chronologique des séquences d'attaques pour une meilleure compréhension des menaces critiques.
3. Actions recommandées automatiquement basées sur des modèles historiques et des niveaux de confiance prédéfinis.
4. Un moteur de conversation IA générative fournissant des informations en temps réel et un support sur des tâches opérationnelles.
Ces avancées sont conçues pour aider les équipes de sécurité à relever le défi de nombreuses attaques avec du temps et des ressources, améliorant potentiellement la posture de sécurité globale des clients.
IBM hat neue generative KI-Funktionen in seine verwalteten Bedrohungserkennungs- und Reaktionsdienste eingeführt. Der auf der watsonx-Plattform basierende IBM Consulting Cybersecurity Assistant zielt darauf ab, die Identifikation, Untersuchung und Reaktion auf kritische Sicherheitsbedrohungen zu beschleunigen und zu verbessern. Zu den wichtigsten Funktionen gehören:
1. Historische Korrelationsanalysen, um komplexe Bedrohungsuntersuchungen zu beschleunigen und die Ermittlungszeiten für Alarmmeldungen um 48 % für einen Kunden zu reduzieren.
2. Eine Zeitleiste der Angriffssequenzen für ein besseres Verständnis kritischer Bedrohungen.
3. Automatisch empfohlene Maßnahmen, basierend auf historischen Mustern und vorab festgelegten Vertrauensniveaus.
4. Eine generative KI-Dialogengine, die Echtzeiteinblicke und Unterstützung bei operativen Aufgaben bietet.
Diese Fortschritte sind darauf ausgelegt, Sicherheitsteams dabei zu unterstützen, die Herausforderung zahlreicher Angriffe mit Zeit und Ressourcen zu bewältigen und potenziell die allgemeine Sicherheitslage der Kunden zu verbessern.
- Introduction of generative AI capabilities to enhance Threat Detection and Response Services
- Reduction of alert investigation times by 48% for one client
- Ability to automatically escalate or close up to 85% of alerts
- Integration with IBM watsonx platform for advanced AI capabilities
- Potential for continuous improvement in speed and accuracy over time
- None.
Insights
IBM's new Generative AI-Powered Cybersecurity Assistant marks a significant advancement in threat detection and response. By leveraging the watsonx platform, this tool could substantially reduce alert investigation times, as evidenced by the
The historical correlation analysis feature is a game-changer, potentially reducing attackers' dwell time and improving overall security posture. However, the effectiveness of this AI-driven approach will heavily depend on the quality and quantity of historical data available. Organizations with historical threat data might see less impressive results initially.
While promising, it's important to monitor for potential false positives or oversights that could arise from over-reliance on AI-driven decisions. Human oversight remains critical in cybersecurity operations.
IBM's integration of generative AI into its Threat Detection and Response Services represents a significant leap in AI application for cybersecurity. The use of IBM's Granite foundation models and watsonx.ai platform showcases a sophisticated approach to AI deployment in a critical sector.
The system's ability to learn continuously from investigations is particularly impressive, suggesting potential for ongoing improvement in speed and accuracy. This adaptive learning capability could provide a substantial edge in the ever-evolving landscape of cyber threats.
However, it's important to note that the effectiveness of such AI systems often depends on the quality and diversity of training data. IBM will need to ensure robust data governance and regular model updates to maintain the system's relevance and accuracy. Additionally, the conversational engine's ability to explain complex security events could significantly enhance SOC efficiency, but its success will hinge on the clarity and accuracy of its natural language processing capabilities.
From a financial perspective, IBM's new AI-powered cybersecurity offering could significantly boost its competitive position in the managed security services market. With cybersecurity spending projected to grow, this innovation could drive increased revenue for IBM's Consulting segment.
The potential for improved operational efficiency in security operations could lead to better profit margins for IBM's cybersecurity services. If the claimed
However, investors should be cautious about immediate financial impact. The true value of this offering will be determined by client adoption rates and long-term performance metrics. It's also worth noting that while IBM is innovating, competitors in the cybersecurity space are also rapidly advancing their AI capabilities. IBM will need to continuously invest and innovate to maintain any competitive advantage gained from this new offering.
New advancements built on watsonx empower IBM Consulting security analysts to help clients accelerate alert investigation
In addition to being included in IBM Consulting's threat detection and response practice, the Cybersecurity Assistant will be part of IBM Consulting Advantage,the AI services platform with purpose-built AI assets designed to empower IBM consultants to deliver value for clients with consistency, repeatability, quality and speed.
"As cyber incidents evolve from immediate crises to multi-dimensional and months-long events, security teams are facing the enduring challenge of too many attacks and not enough time or people to defend against them," said Mark Hughes, Global Managing Partner of Cybersecurity Services, IBM Consulting. "By enhancing our Threat Detection and Response services with generative AI, we can reduce manual investigations and operational tasks for security analysts, empowering them to respond more proactively and precisely to critical threats, and helping to improve overall security posture for clients."
IBM's Threat Detection and Response (TDR) Services can automatically escalate or close up to
Accelerate threat investigations and remediation with historical correlation analysis
The Cybersecurity Assistant is designed to help speed up complex threat investigations via historical correlation analysis of similar threats. Built into IBM's TDR Services, the new capability cross-correlates alerts and enhances insights from SIEM, network, EDR, vulnerability and telemetry to provide a holistic and integrative threat management approach.
By analyzing patterns of historical, client-specific threat activity, security analysts will be equipped to be more proactive and precise. To help them better comprehend critical threats, analysts will have access to a timeline view of attack sequences, helping them to better comprehend the issue and provide more context to investigations. The assistant will also auto-recommend actions based on the historical patterns of analyzed activity and pre-set confidence levels, speeding response times for clients and helping to reduce attackers' dwell time. With the ability to continuously learn from investigations, the Cybersecurity Assistant's speed and accuracy is expected to improve over time.
Streamlined operational tasks with an advanced conversational engine
The Cybersecurity Assistant includes a generative AI conversational engine that provides real-time insights and support on operational tasks to both clients and IBM security analysts. In addition to responding to requests such as opening or summarizing tickets, the conversational feature can automatically trigger relevant actions, including running queries, pulling logs, command explanations or enriching threat intelligence. By explaining complex security events and commands, the TDR Service can help reduce noise and boost overall SOC efficiency for clients.
"With IBM's advancements to its managed security services, businesses can gain a new level of insight into critical threats and benefit from technology that continuously learns from actions taken within their specific environment. This helps drive a cycle of increasingly accurate and rapid threat investigations, which is especially crucial today as businesses face a shortage of security resources and surplus in security risks and vulnerabilities," said Craig Robinson, a Research Vice President for IDC's Security Services Research Practice.
Built in collaboration with IBM Research, the new IBM Consulting Cybersecurity Assistant takes advantage of IBM's broader generative AI capabilities – built on the company's Granite foundation models, refined for production within IBM watsonx.ai, and tapping into IBM watsonx Assistant for the conversational chat interface.
Additional Sources
- Visit here for more information on IBM TDR Services
- Inquire about a no-cost threat management workshop
- Join our webinar, "Leveraging Security AI and Automation to mitigate the impact of data breaches," on Tuesday, September 17 at 11:00 a.m. ET
About IBM
IBM is a leading provider of global hybrid cloud and AI, and consulting expertise. We help clients in more than 175 countries capitalize on insights from their data, streamline business processes, reduce costs, and gain the competitive edge in their industries. More than 4,000 government and corporate entities in critical infrastructure areas such as financial services, telecommunications and healthcare rely on IBM's hybrid cloud platform and Red Hat OpenShift to affect their digital transformations quickly, efficiently and securely. IBM's breakthrough innovations in AI, quantum computing, industry-specific cloud solutions and consulting deliver open and flexible options to our clients. All of this is backed by IBM's long-standing commitment to trust, transparency, responsibility, inclusivity and service.
1 Based on IBM's internal analysis of aggregated performance data observed from engagements with 340+ clients in July 2023. Up to
Media Contact:
Joel Rushing
Joel.Rushing@ibm.com
View original content to download multimedia:https://www.prnewswire.com/news-releases/ibm-introduces-new-generative-ai-powered-cybersecurity-assistant-for-threat-detection-and-response-services-302213940.html
SOURCE IBM
FAQ
What is the new AI-powered cybersecurity tool introduced by IBM (NYSE: IBM)?
How does IBM's new Cybersecurity Assistant improve threat investigation times?
What percentage of alerts can IBM's Threat Detection and Response Services automatically handle?
What are the key features of IBM's new Cybersecurity Assistant?
