- Google announced a shift from a human-led cyber defense to an AI-led cyber defense, overseen by human operators.
- At its Cloud Next conference, it introduced new agents for threat hunting, detection engineering, and third-party context enrichment.
- Existing AI agents, such as Triage and Investigation, have already processed millions of alerts, reducing analysis times from half an hour to about a minute.
Google is moving from a human-led cyber defense strategy to a human-supervised cyber defense strategy, and to achieve that goal, it is introducing even more Artificial Intelligence (AI) agents.
Google Cloud Next is the company’s main annual conference where it showcases its latest innovations in cloud computing, artificial intelligence, security and data analysis.
Here, it demonstrated three new agents: threat hunting, detection engineering, and third-party context.
Article continues below.
Future Agent Fleet
The first agent is designed to help security teams look for new attack patterns and stealthy malicious behavior that might otherwise go unnoticed by a human defender.
“As the name implies, it looks for emerging threats in your organization’s environment using intelligence from our Google Threat Intelligence and Mandiant best practices,” explained Google Cloud COO Francis deSouza. “It does this continuously on an infinite scale, much faster than it could be done with a human-led defense.”
The second agent, Detection Engineering, helps companies find security coverage gaps in their IT environments and then creates new detections and detection rules, based on the results of its findings.
Third Party Context, an agent who, according to The Registrywhich will be released soon, uses third-party data to enrich and improve existing security workflows.
“It’s very clear that we’ve moved from a human-led defense strategy to a human-in-the-loop defense strategy to a human-supervised AI-led defense strategy,” deSouza said during the Google Cloud Next press conference, which took place in Las Vegas this week. “Our model for the future is a fleet of agents that performs much of the routine cybersecurity work at a mechanical pace and is then monitored by humans.”
Google’s research and ranking agent, which was announced in the same way last year, is now generally available, the publication further confirmed. Over the past year, it processed more than five million alerts, reportedly reducing a typical manual analysis from 30 minutes to just 60 seconds.
Through The Registry
The best antivirus for all budgets
Follow TechRadar on Google News and add us as a preferred source to receive news, reviews and opinions from our experts in your feeds.
