- Google announced a shift from human-led cyber defense to AI-led cyber defense overseen by human operators.
- At its Cloud Next conference, the company introduced new agents for threat hunting, detection engineering, and third-party context enrichment.
- Existing AI agents like Triage and Investigation have already processed millions of alerts, reducing analysis times from half an hour to around a minute.
Google is moving from a human-led cyber defense strategy to a human-supervised cyber defense strategy, and to achieve this goal it is introducing even more artificial intelligence (AI) agents.
Google Cloud Next is the company’s main annual conference where it showcases its latest innovations in cloud computing, AI, security and data analytics.
Here, he introduced three new agents: Threat Hunting, Detection Engineering, and Third-Party Context.
Article continues below
Agent fleet of the future
The first agent is designed to help security teams look for new attack patterns and stealthy malicious behaviors that might otherwise go unnoticed by a human defender.
“As the name suggests, it searches for emerging threats in your organization’s environment using insights from our Google Threat Intelligence and Mandiant best practices,” explained Francis deSouza, chief operating officer of Google Cloud. “It does it continuously on an infinite scale, much faster than you could do with a human-led defense.”
The second agent, Detection Engineering, helps businesses detect security vulnerabilities in their IT environments and then creates new detections and detection rules, based on the results of its findings.
Third-party context, an agent who, according to The registerwhich will be released soon, uses third-party data to enrich and improve existing security workflows.
“It’s very clear that we’ve moved from a human-led defense strategy, to a human-in-the-loop defense strategy, to an AI-led defense strategy overseen by humans,” deSouza said at the Google Cloud Next press conference, which takes place in Las Vegas this week. “Our model for the future is a fleet of agents that does much of the routine cybersecurity work at a machine pace and then is supervised by humans.”
Google’s Triage and Investigation agent, similarly announced last year, is now available to everyone, the publication further confirms. Over the past year, it has processed more than five million alerts, allegedly reducing a typical 30-minute manual scan to just 60 seconds.
Via The register
The best antivirus for every budget
Follow TechRadar on Google News And add us as your favorite source to get our news, reviews and expert opinions in your feeds.
