Artificial Intelligence based Security Orchestration, Automation and Response System
| Autor: | Rahul Vast, Shruti Sawant, Aishwarya Thorbole, Vishal Badgujar |
|---|---|
| Rok vydání: | 2021 |
| Předmět: |
050101 languages & linguistics
Computer science Event (computing) business.industry 05 social sciences 02 engineering and technology Computer security computer.software_genre Security information and event management Automation Field (computer science) Variety (cybernetics) 0202 electrical engineering electronic engineering information engineering Profiling (information science) 020201 artificial intelligence & image processing 0501 psychology and cognitive sciences Orchestration (computing) Soar business computer |
| Zdroj: | 2021 6th International Conference for Convergence in Technology (I2CT). |
| Popis: | Cybersecurity is becoming very crucial in the today's world where technology is now not limited to just computers, smartphones, etc. It is slowly entering into things that are used on daily basis like home appliances, automobiles, etc. Thus, opening a new door for people with wrong intent. With the increase in speed of technology dealing with such issues also requires quick response from security people. Thus, dealing with huge variety of devices quickly will require some extent of automation in this field. Generating threat intelligence automatically and also including those which are multilingual will also add plus point to prevent well known major attacks. Here we are proposing an AI based SOAR system in which the data from various sources like firewalls, IDS, etc. is collected with individual event profiling using a deep-learning detection method. For this the very first step is that the collected data from different sources will be converted into a standardized format i.e. to categorize the data collected from different sources. For standardized format Here our system finds out about the true positive alert for which the appropriate/ needful steps will be taken such as the generation of Indicators of Compromise report and the additional evidences with the help of Security Information and Event Management system. The security alerts will be notified to the security teams with the degree of threat. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|