IBM unveiled new generative AI capabilities within its managed Threat Detection and Response (TDR) Services, designed to enhance security operations for clients. This advanced feature, built on IBM's watsonx data and AI platform, introduces the IBM Consulting Cybersecurity Assistant, which aims to expedite and improve the identification, investigation, and response to critical security threats. This new tool is part of IBM Consulting's threat detection and response practice, as well as the IBM Consulting Advantage AI services platform, designed to provide consistent, repeatable, quality, and speedy value to clients.
By incorporating generative AI into its Threat Detection and Response Services, IBM said it is better able to address the persistent challenge of overwhelming cyber threats and limited resources for security teams. This integration aimed to reduce manual investigations and operational tasks, empowering security analysts to respond proactively and accurately to critical threats. The new Cybersecurity Assistant is set to revolutionize how alerts are managed and investigated, significantly reducing investigation times and improving overall security posture.
Key features of the IBM Consulting Cybersecurity Assistant include:
- Accelerated Threat Investigations and Remediation: Utilizing historical correlation analysis, the assistant cross-correlates alerts and enhances insights from various sources such as SIEM, network, EDR, vulnerability, and telemetry, providing a holistic threat management approach.
- Proactive and Precise Threat Analysis: By analyzing patterns of historical, client-specific threat activity, analysts gain a timeline view of attack sequences, auto-recommend actions, and continuously improve in speed and accuracy.
- Streamlined Operational Tasks: An advanced conversational engine offers real-time insights and support, automating operational tasks like opening tickets, running queries, and enriching threat intelligence, thereby boosting SOC efficiency.
- Collaborative Development with IBM Research: Leveraging IBM's Granite foundation models and watsonx.ai, the Cybersecurity Assistant taps into IBM watsonx Assistant for its conversational interface, ensuring refined, production-ready capabilities.
