JE Special Edition - Cybersecurity

AI has transformed the way companies handle cyber threats. With a holistic approach, AI can identify the various vectors of an attack while simultaneously taking containment measures, isolating threats from the rest of the environment. Let’s explore how AI can be used to protect companies, businesses, and especially people’s digital presence:

Threat Monitoring and Detection – Through machine learning (ML), it is possible to establish a regular behaviour pattern within a company’s computing environment. In the event of a deviation, behavioural analysis can identify anomalies and contain a potential attack.

Automated Incident Responses – The use of tools to provide automated responses is being enhanced by AI. Various responses are established for each type of event, known as playbooks. A playbook is triggered in the event of a suspected attack, characterised by combined actions that pose a threat to the environment.

Reduction of False Positives – Through the use of ML, it is possible to identify numerous false positives, for instance, in a vulnerability analysis tool. Often, the high number of detected vulnerabilities distracts defence teams, leading to prioritisation of these false positives.

Malware Analysis and Mitigation – The detection of unknown malware is a capability increasingly used in cybersecurity platforms, and through AI, this capability has become even more powerful. It is possible to direct them to a sandbox for testing.

Stronger Authentication and Access Control – Behavioural analysis can verify whether the person authenticating is legitimate. Consequently, access will be granted according to what is permitted to them.

‍

Marcelo Nascimento
Head of Cybersecurity at Highdome (Agap2IT Portugal)

JE (Jornal Economico) Special Edition

‍