Security Copilot will combine Microsoft's vast threat intelligence footprint with industry-leading expertise to augment the work of security professionals through an easy-to-use AI assistant. "Today the odds remain stacked against cybersecurity professionals. Too often, they fight an asymmetric battle against relentless and sophisticated attackers," said Vasu Jakkal, corporate vice president, Microsoft Security. "With Security Copilot, we are shifting the balance of power into our favor. Security Copilot is the first and only generative AI security product enabling defenders to move at the speed and scale of AI." Security Copilot is designed to work seamlessly with security teams, empowering defenders to see what is happening in their environment, learn from existing intelligence, correlate threat activity, and make more informed, efficient decisions at machine speed.

March 28, 2023 -- Microsoft Corp. on Tuesday announced it is bringing the next generation of AI to cybersecurity with the launch of Microsoft Security Copilot, giving defenders a much-needed tool to quickly detect and respond to threats and better understand the threat landscape overall. Security Copilot will combine Microsoft's vast threat intelligence footprint with industry-leading expertise to augment the work of security professionals through an easy-to-use AI assistant. "Today the odds remain stacked against cybersecurity professionals. Too often, they fight an asymmetric battle against relentless and sophisticated attackers," said Vasu Jakkal, corporate vice president, Microsoft Security. "With Security Copilot, we are shifting the balance of power into our favor. Security Copilot is the first and only generative AI security product enabling defenders to move at the speed and scale of AI." Security Copilot is designed to work seamlessly with security teams, empowering defenders to see what is happening in their environment, learn from existing intelligence, correlate threat activity, and make more informed, efficient decisions at machine speed.

The odds are against today's defenders Today the odds remain stacked against cybersecurity professionals. Too often, they fight an asymmetric battle against prolific, relentless and sophisticated attackers. To protect their organizations, defenders must respond to threats that are often hidden among noise. Compounding this challenge is a global shortage of skilled security professionals, leading to an estimated 3.4 million openings in the field. The volume and velocity of attacks requires us to continually create new technologies that can tip the scales in favor of defenders.

As technology continues to evolve, so do cyber threats. In 2021 alone, cybercrime caused losses of around $1 trillion worldwide and is expected to grow to 10.5 trillion annually by 2025. To stay ahead of attackers and strengthen defenses against them, cybersecurity companies are seeking ways to enhance technology. One promising technology that's becoming increasingly popular in this space is ChatGPT – an emerging standard that promises improved efficiency when handling sensitive data. ChatGPT has the potential to revolutionize cybersecurity by providing a faster and more efficient method for analyzing data, detecting threats, and responding to incidents.

Over the last years, software development in domains with high security demands transitioned from traditional methodologies to uniting modern approaches from software development and operations (DevOps). Key principles of DevOps gained more importance and are now applied to security aspects of software development, resulting in the automation of security-enhancing activities. In particular, it is common practice to use automated security testing tools that generate reports after inspecting a software artifact from multiple perspectives. However, this raises the challenge of generating duplicate security findings. To identify these duplicate findings manually, a security expert has to invest resources like time, effort, and knowledge. A partial automation of this process could reduce the analysis effort, encourage DevOps principles, and diminish the chance of human error. In this study, we investigated the potential of applying Natural Language Processing for clustering semantically similar security findings to support the identification of problem-specific duplicate findings. Towards this goal, we developed a web application for annotating and assessing security testing tool reports and published a human-annotated corpus of clustered security findings. In addition, we performed a comparison of different semantic similarity techniques for automatically grouping security findings. Finally, we assess the resulting clusters using both quantitative and qualitative evaluation methods.

There's no amount of benefit one can derive from artificial intelligence without also taking cognizance of the risks. When it comes to artificial intelligence and security, there's a whole lot of AI predictions out there. In a report published by Eric Mack, Simon Biggs, a professor of interdisciplinary arts at the University of Edinburgh said: "My expectation is that in 2030, A.I. will be in routine use to fight wars and kill people, far more effectively than we can currently kill." AI is the ability of machines to perform tasks that normally require human intelligence, for example, the ability to recognize patterns, the ability to learn from experience, the ability to draw conclusions, the ability to make predictions or taking action – which could be digitally done or through smart software. Artificial Intelligence are now massively used in fields like healthcare, manufacturing, education and cybersecurity.

Whether it's in novels, or the movies based on them, artificial intelligence has been a subject of fascination for decades. The synthetic humans envisioned by Philip K. Dick remain (fortunately) the stuff of science fiction, artificial intelligence is real and playing an increasingly large role in many aspects of our lives. While it's fun to root against (or maybe for) human-like robots with AI brains, a much more mundane, but equally powerful form of AI is starting to play a role in cybersecurity. The goal is for AI to be a force multiplier for hardworking security professionals. Security operations center (SOC) analysts, as we saw in the most recent Devo SOC Performance Report, are often overwhelmed by the never-ending number of alerts that hit their screens each day.

What does AI do to alter the course of history? Let's begin with some terms and concepts. While most people are familiar with robots, some may not be able to distinguish them from other types of technology. Robotic systems can be described as perceptual and interrelated, collaborative, size and athleticism. They are capable of detecting the environment with detectors and understanding events using computer programs. They can also plan with machine learning that is implemented in computer programs.

For as long as humans have been fighting wars, innovation has allowed the eventual winning side to gain the upper hand. From the creation of the phalanx to the guerrilla warfare tactics that won the American Revolution to the use of air superiority to control ground warfare, we have seen military operations evolve to meet the challenges of time and place. Today's wars are fought as much in cyberspace as they are on the physical field of battle – and are being waged against organizations large and small, not just between nations and their militaries. As we've seen with the recent hybrid war between Russia and the Ukraine, cyberattacks are an important tool of modern warfare. Nation-states now use less overt ways to breach their adversary's cyber defenses, disrupting military operations and critical infrastructures such as water, electricity, traffic routing, banks, and strategic institutions.

Artificial intelligence has advanced greatly in the past decade. On my phone, I'm reading Apple and Google news that is well-tailored to me, thanks to AI recommendation models. Self-driving cars are already picking up passengers for rides in downtown San Francisco. The same transformation is happening in the cybersecurity world too. However, questions remain: Will AI replace security professionals?