When GenAI can be used in Cybersecurity programs today and using the tools that are already available? This brief article is to explore some use cases that create immediate value for any Cybersecurity program, small or large.
While there are many, let us briefly list each shown in the diagram above.
- Security Awareness – Almost all security programs have security awareness as a component. GenAI tools are extremely useful to create content, whether it is an email, brochure or a poster, you can create professional content quite easily decreasing weeks of work into just few hours.
- Vulnerability Summarization – Imagine you have to provide quick information to your executives about a vulnerability that is being reported in the media. GenAI tools can collect information, summarize, and put it in a nice one-page document quite easily. It is a big time saver!
- SIEM content development – Just like GenAI is very good at writing Python programs, it is also good at creating detection rules for SIEM, such as Splunk. It is your personal assistant to accelerate new content deployment.
- Scripting and Automation – Need a quick Python or Shell script? I use these tools to reduce my work from hours to minutes. You can do the same.
- Code Security Reviews – Code review is made simple with many open source and commercial tools. Many of these tools not only detect logic flaws but also provide recommendations to fix it.
- Threat Hunting – Feed log data to a model and detect anomalies to give you a starting point for building your hypothesis for threat hunting.
- Describe a Security Flaw – Instead of writing pages on how common security flaws, such as SQL injection works, get help from GenAI tools.
All people need is a good sense of prompt engineering to use the available tools. Actually learning GenAI will give you many ideas about how you can create more sophisticated applications and agents to carry out more complex tasks in an automated fashion.
