数据驱动防御——生成式人工智能和红黄绿灯系统助力实时威胁响应.pdf

1、Data to Defense:Generative AI and RAG Powering Real-Time Threat ResponseJ ames SpiteriThe Challenge with LLMsSo,what isRAG?RAG?So,what isRAG?RAG?R Retrieval.A Augmented.G Generation.So,what isRAG?RAG?R Retrieval.A Augmented.G Generation.TL;DR-A fancy way of saying“cleverly supplying additional conte

2、xt to an LLM”The Right The Right AnswerAnswerGAI/LLMGAI/LLMYour Question+Public Internet Data Your DataYour QuestionContext WindowdocumentsimagesaudioHow does it help security operations teams?Turn data which is difficult to operationalize into a valuable resource during an incident.How does it help

3、 security operations teams?Turn data which is difficult to operationalize into a valuable resource during an incident.ExamplesExamplesExamplesSo,what do we need?Embeddings Model Vector+Data Store Vector+BM25 Search engine LLM LLM orchestration framework or functionsSo,what do we need?Embeddings Mode

4、l=Creates embeddings/vectors Vector+Data Store=Stores data and generated embeddings Vector+BM25 Search engine=Searches vectors and data traditionally LLM=Formulates the response,identifies what data to query LLM orchestration framework or functions=Stitches the process togetherWhats the experience for an Analyst?Whats the experience for an Analyst?And under the hood?Why not fine tune,pre train,etc?Why not fine tune,pre train,etc?Thank you!