Security vendors continue to integrate artificial intelligence (AI) capabilities into their platforms, the latest being Racework.
Lacework introduced a feature called “.AI assist” to the Cloud Native Application Protection Platform (CNAPP). AI Assist addresses how triaging, investigating, and responding to alerts can be a daunting task for security analysts and practitioners, especially in dynamic cloud environments where configurations and permissions are constantly changing. .
This analysis describes Lacework’s AI Assist and the value it brings to security professionals and organizations. This capability builds on Lacework’s deep AI and machine learning (ML) expertise and background in building cutting-edge cloud-native security platforms with context-rich data analytics.
personalized recommendations
The Racework AI Assist feature provides personalized recommendations based on a person’s role, privileges, and perspective within the organization. This means that recommendations can be trained based on data from previous activities, as well as contextual information from the environments and workloads that individuals manage and protect.
natural language interaction
You can operate AI Assist in the following ways: Natural language processing. Use plain language from the most basic terms and concepts to more advanced technical concepts and nuances. This not only appeals to junior employees leveling up their cloud-native security expertise, but also to seasoned cloud security engineers who want to accelerate their daily work, save time, and focus on more important tasks. This is very powerful.
Fast repair and resolution
Time is of the essence when it comes to vulnerability and incident resolution. The longer it takes to resolve an incident, the more damage an attacker can do. The longer a vulnerability remains unfixed, the wider the range of attacks it can be exploited. With AI Assist, agents can get timely, context-rich recommendations on how to resolve vulnerabilities and reduce risk.
AI Assist also allows practitioners to generate detailed Infrastructure-as-Code (IaC) templates and make subtle changes to cloud configurations to resolve vulnerabilities and misconfigurations. Manually creating complex IaC templates such as Terraform or cloud service provider (CSP)-specific templates such as AWS Cloudformation can be time-consuming.
Instead, practitioners can leverage AI Assist to quickly launch IaC templates to provision new environments or make configuration changes that might expose sensitive data or not follow security best practices. Masu. These templates streamline activities and allow security personnel to quickly deploy changes to her IaC and change configurations such as exposed data buckets and over-authorized identities and workloads.
Pay attention to fatigue and workforce plight
Sifting through the endless number of alerts generated by the numerous security tools most organizations use and determining which are actually important and pose a risk to the organization, and which are false positives or unimportant results It may take some time. . Racework AI Assist facilitates this by quickly explaining to personnel why an alert is important and what they can then do to resolve it.
This becomes even more important when you recognize the workforce challenges prevalent in the cybersecurity industry.sources such as ISC2 It says there is a shortage of up to 3.5 million qualified cybersecurity professionals. Platforms like Raceworks AI Assist allow resource- and time-constrained organizations to leverage AI-enabled and automation-driven capabilities to scale the impact of their cybersecurity workforce.
![](https://cdn-heamn.nitrocdn.com/QwmNANDJzoOQGYxvvetRZNxDbJRusvGr/assets/images/optimized/rev-aca4322/accelerationeconomy.com/wp-content/uploads/2024/01/GPT-1024x1024.jpg)
Ask AnalystGPT about this analysis
People often joke that AI will take away jobs, but a common counter-argument is that it won’t, but that the people who use it will. In this case, individuals and organizations using AI simply have better incident response compared to other organizations that do the work manually and do not take advantage of the AI capabilities provided by cybersecurity vendors such as Lacework. , vulnerability management, and risk mitigation capabilities.
In a world where defenders must always be right and attackers must only be right once, evolving technologies such as AI are being used to accelerate and strengthen cybersecurity capabilities and strengthen an organization’s defenses. you need to rely on.