Artificial Intelligence (AI) Technologies such as Generative AI prompting, Retrieval Augmented Generation (RAG) and Agentic AI have started to emerge in cybersecurity operations and use-cases independently. We propose an intelligent orchestration mechanism that sifts the requirements of contextual injection, smart autonomy, integrated use case and intent capture. It is capable of reducing hallucinations and capable of enhancing semantic reasoning using prompting, RAG and Agentic AI, smartly, simultaneously and on demand. We propose such an integrated novel suite of framework tools unifying System Integration and Events Management (SIEM) and security Orchestration Automation and Response (SOAR). We develop, discuss and demonstrate the system as a plug and play with popular cybersecurity platforms. We provide 2 real world case studies to demonstrate the efficiency over the current state of the art performing SIEM and SOAR tools. The plug-in is scalable for the Model context protocol (MCP) and Agent to Agent (A2A) ecosystems.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

An Intelligent Plug-In Playable Orchestration Model that Combines Gen-AI Prompting, RAG and Agentic AI for Efficient Cybersecurity Operations

  • Sharukesh Mahendran,
  • Sai Sundarakrishna,
  • V. S. Vignesh,
  • Pradeep Menon Perinchery

摘要

Artificial Intelligence (AI) Technologies such as Generative AI prompting, Retrieval Augmented Generation (RAG) and Agentic AI have started to emerge in cybersecurity operations and use-cases independently. We propose an intelligent orchestration mechanism that sifts the requirements of contextual injection, smart autonomy, integrated use case and intent capture. It is capable of reducing hallucinations and capable of enhancing semantic reasoning using prompting, RAG and Agentic AI, smartly, simultaneously and on demand. We propose such an integrated novel suite of framework tools unifying System Integration and Events Management (SIEM) and security Orchestration Automation and Response (SOAR). We develop, discuss and demonstrate the system as a plug and play with popular cybersecurity platforms. We provide 2 real world case studies to demonstrate the efficiency over the current state of the art performing SIEM and SOAR tools. The plug-in is scalable for the Model context protocol (MCP) and Agent to Agent (A2A) ecosystems.