Google unveils AI-driven threat intelligence to streamline defences
Google has introduced a new cybersecurity product called Google Threat Intelligence, with the aim of addressing the challenges in threat intelligence. One of the main hurdles in threat intelligence is the lack of a comprehensive view of threats and the difficulty in translating intelligence into actionable protection.
Google Threat Intelligence combines the expertise of Mandiant, the extensive reach of the VirusTotal community, and Google's unparalleled visibility. The product leverages Gemini, an artificial intelligence (AI) agent that is poised to revolutionize the speed and efficiency in handling threats.
The Importance of Contextualizing Threat Intelligence
According to Dave Gruber, Principal Analyst at Enterprise Strategy Group, while there is no shortage of available threat intelligence, the challenge lies in contextualizing and operationalizing intelligence specific to each organization. Google, through VirusTotal and Mandiant, offers two crucial pillars of threat intelligence in the industry. By integrating both with AI and Google's threat insights, security teams can better operationalize actionable threat intelligence to enhance organizational protection.
Unparalleled Visibility and Insights
Google Threat Intelligence provides unprecedented visibility into global threats. By leveraging insights from Mandiant's incident response and threat research team, along with Google's vast user and device footprint and VirusTotal's malware database, unique insights are made possible. Google currently protects billions of devices, blocks millions of phishing attempts daily, and safeguards billions of email accounts.
Mandiant's top-tier consultants continuously monitor threat actor groups worldwide, utilizing frontline intelligence to protect customers from sophisticated adversaries. VirusTotal's large user community contributes potential threat indicators, enriching Google Threat Intelligence's knowledge base.
Innovative Approach with AI-Driven Solutions
Google Threat Intelligence distinguishes itself with an innovative shift away from traditional labor-intensive methods of operationalizing threat intelligence, which often lead to delays in response times. The AI-powered Gemini analyzes suspicious code and delivers concise results, enhancing threat research processes, defense capabilities, and response times.
The inclusion of Gemini 1.5 Pro in Google Threat Intelligence exemplifies this approach. This tool simplifies the complex process of reverse engineering malware, significantly reducing analysis time. For instance, it analyzed the decompiled code of WannaCry malware in just 34 seconds to identify the killswitch.
Part of Google Cloud Security's Comprehensive Portfolio
Google Threat Intelligence is part of Google Cloud Security's comprehensive security offerings, which also include Google Security Operations, Mandiant Consulting, Security Command Center Enterprise, and Chrome Enterprise. These solutions enable organizations to tackle security challenges using Google's robust capabilities to ensure online safety for individuals and organizations worldwide.
