IBM Introduces Gen AI-Powered Cybersecurity Assistant For Threat Detection And Response

IBM has introduced generative AI capabilities to its managed threat detection and response services, enhancing security operations for enterprises through IBM Consulting analysts. Built on the Watsonx data and AI platform, the new IBM Consulting Cybersecurity Assistant aims to accelerate the identification, investigation, and response to critical security threats.

This cybersecurity assistant will be integrated into IBM Consulting's Threat Detection and Response (TDR) practice and the IBM Consulting Advantage, an AI services platform with purpose-built AI assets.

IBM’s TDR services can automatically escalate or close most alerts, and the integration of generative AI with existing automation tools enables security analysts to investigate the remaining alerts more quickly. Mark Hughes, Global Managing Partner of Cybersecurity Services at IBM Consulting, stated, "By enhancing our Threat Detection and Response services with generative AI, we can reduce manual investigations and operational tasks for security analysts, empowering them to respond more proactively and precisely to critical threats, and helping to improve overall security posture for clients."

Threat Investigations and Remediation

The cybersecurity assistant is designed to accelerate threat investigations through historical correlation analysis of similar threats. It cross-correlates alerts and provides insights from security information and event management (SIEM), network and endpoint detection and response (EDR), vulnerability management, and telemetry for a comprehensive threat management approach.

Analysts will benefit from a timeline view of attack sequences and auto-recommendations based on historical patterns and pre-set confidence levels.

Advanced Conversational Engine

The assistant also features a generative AI conversational engine that delivers real-time insights and support for operational tasks to both enterprises and IBM security analysts. This conversational feature can handle requests like opening or summarizing tickets and can automatically trigger relevant actions, including running queries, pulling logs, and improving threat intelligence.

Developed in collaboration with IBM Research, the cybersecurity assistant leverages IBM's generative AI capabilities, built on the Granite foundation models within IBM watsonx.ai, and incorporates IBM watsonx Assistant for the conversational chat interface.

Source: https://www.ndtvprofit.com/technology/ibm-introduces-gen-ai-powered-cybersecurity-assistant-for-threat-detection-and-response