From risk to resilience: Empowering cybersecurity teams with AI assistants
As enterprises rush to incorporate autonomous AI agents and assistants into their operations, cybersecurity experts emphasize the importance of proceeding cautiously and deliberately, particularly in the realm of cybersecurity.
Risk of using off-the-shelf AI agents in security applications
Deploying off-the-shelf agents and assistants trained on internet data in security applications can be risky, according to John Velisaris, an Associate Partner of Security Services at IBM Consulting. Velisaris likens this approach to running with scissors in business operations, warning of potential harm. However, customizing security-specific assistants, such as the IBM Consulting Cybersecurity Assistant, can yield significant benefits. Trained on a company’s historical incident data, IBM’s digital assistant aims to enhance cybersecurity teams' capabilities in detecting and addressing threats more efficiently.
Challenges faced by cybersecurity professionals
In a recent survey of over 1,800 cybersecurity professionals, 66% reported that their job had become more stressful compared to five years ago. The evolving threat landscape, characterized by sophisticated social engineering attacks like phishing, coupled with inadequate cybersecurity budgeting and staffing, compounds the challenges faced by cybersecurity teams. Mark Hughes, Global Managing Partner of Cybersecurity Services at IBM Consulting, notes that security teams are grappling with the relentless onslaught of attacks amid resource constraints.
Role of AI assistants in cybersecurity
Automated AI assistants play a crucial role in augmenting cybersecurity functions. These assistants expedite threat diagnosis, propose remediation strategies based on historical analysis, automate repetitive tasks, and facilitate the onboarding of new cybersecurity personnel. Studies have shown that automated chatbots, such as OpenAI’s ChatGPT and Google’s Bard, exhibit promising performance in ethical hacking certification tests, demonstrating their potential as valuable tools for cybersecurity teams.
The evolving landscape of enterprise security
AI is revolutionizing enterprise security, akin to the automation witnessed in aviation decades ago. Just as commercial pilots transitioned from manual control to operating technology systems, cybersecurity professionals are leveraging AI to bolster security operations. IBM’s AI-powered Threat Detection and Response Services automatically address a significant portion of threat alerts, enabling security analysts to focus on critical alerts promptly. The IBM Consulting Cybersecurity Assistant further enhances this process by delivering real-time insights and support to clients and security analysts, reducing alert investigation times significantly.
Ensuring the security of AI tools in cybersecurity
As organizations integrate AI tools into their cybersecurity frameworks, ensuring the security of these tools is paramount. Despite the recognition of secure AI as crucial to business success, a study by the IBM Institute for Business Value revealed that only a minority of C-suite executives were actively securing their AI projects. IBM WatsonX offers solutions to enhance the trustworthiness of AI applications, including watsonx.governance, which enables organizations to manage AI usage securely.
By carefully balancing AI autonomy with human oversight, organizations can effectively harness autonomous AI capabilities in cybersecurity to bolster resilience against emerging threats. IBM Security® provides AI-powered solutions that optimize analysts’ time, facilitating enhanced threat detection, rapid response, and robust data protection.
