Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Tenable 部落格

訂閱

How to Discover, Analyze and Respond to Threats Faster with Generative AI

Lines of code on a screen

Generative AI (GenAI) is being hailed as the most transformative innovation since the rise of the internet in the 1990s. For security, GenAI can revolutionize the field if applied correctly, especially when it comes to threat detection and response. It enhances efficiency and productivity by swiftly processing and delivering critical information when it matters most.

Security has always been about mitigating risk. It’s been the security professional’s lot in life to drop everything, come in and clean up after a problem occurs. Prevention has long been a challenge and a goal. But, on a day-to-day basis, security teams always find themselves in react mode. If you run or work on a security team, you know the story well: you feel short-staffed and face bandwidth constraints. Plus, resource alignment is a struggle and time is the enemy. If anyone deserves an additional hour in the day, it's members of the security team.

If you’re like others, you probably spend a lot of your day with your head on a swivel, going from screen to screen to firefight ongoing threats.

As a result, it feels like you’re always a step behind the threats. That’s the norm and many have come to accept it.

A better way

But there is a better way: Generative AI. GenAI has been heralded as the biggest change in society since the rise of the web in the 1990s. There’s a lot of hype to sift through and it’s not about sentient robots taking over the world. This isn’t HAL 9000 in 2001: A Space Odyssey. 

For security it is a total game changer – if done correctly. GenAI can boost efficiency and productivity by processing, retrieving, and delivering useful information in the most critical times of need. At the end of the day, GenAI can augment processes so that security teams can get that well-deserved hour back. 

So how does it work? GenAI can cut through complexity so security teams can work, search, and analyze faster. As a result, they can make rapid decisions, accelerating what they can get done in a day.

GenAI provides useful context when you need it–think of it as an AI Assistant. The guidance it provides can help you stay ahead of attackers. 

Not just pie-in-the-sky

OK–so is this just pie-in-the-sky AI hype like we see every day? Not at all. This is real. 

At Tenable, we’ve been at it for years. 

We’ve been applying AI techniques to security for some time now. Take a look at our Vulnerability Priority Rating, which uses Machine Learning to help security teams understand which vulnerabilities to prioritize. Tenable also has a track record of sharing our AI knowledge. We’ve made AI research and tools available – for free – to the cybersecurity research community, including work from the Tenable Research team that creates efficiencies in processes such as reverse engineering, code debugging, web app security and visibility into cloud-based tools.

We’re also using GenAI to put more power in the hands of security teams – and we’re doing it today.

Why are we investing in GenAI?

We’ve seen interest in GenAI in the demand we’re getting from customers and, in a broader sense, we’ve seen it across a large swath of the security professional community that have responded to the tools we’ve made available. 

To learn more, we asked Forrester to investigate the interest in GenAI. 

The results show a real need for GenAI. There’s demand for helping make people more efficient and make prevention attainable.

Let’s dig into the study.

People want GenAI to improve customer experiences

We asked people who are also responsible for setting, managing and implementing security strategies the extent to which their organizations are using or planning to use GenAI to accomplish certain goals in the next year. It’s clear that people want GenAI to improve experiences and efficiency–specifically they’re interested in optimizing CX and centralizing operations. 

Fifty-three percent of people told us they want GenAI to improve customer experience and 41% said they’d like to streamline technology. 

The idea is that GenAI should help to make the life of security professionals easier. 

Graph shows how organizations are using AI
Question: To what extent is your organization using or planning to use genAI for the purpose of accomplishing the following goals over the next 12 months? 受訪對象: 602 respondents who are involved with setting, managing, and/or implementing cybersecurity/security strategies, and/or performance metrics and are planning to use genAI in the next year or are currently using genAI. Source: A commissioned study conducted by Forrester Consulting on behalf of Tenable, October 2023

There’s growing interest in using GenAI in security

With the answers of the previous question in mind, we focused on cybersecurity and GenAI with the same question: “To what extent is your organization using or planning to use GenAI for the purpose of accomplishing the following goals over the next 12 months?” 

The results were enlightening, 68% showed some level of interest in using GenAI to align IT/security goals with business goals and 37% said they plan to do so in the next 12 months.

A similar number – 67% – showed interest in using it to increase or improve the way their organization practices preventive cybersecurity (with 28% planning to do so in the next 12 months). 

Graph shows future plans for GenAI
Question: To what extent is your organization using or planning to use genAI for the purpose of accomplishing the following goals over the next 12 months?Base: 602 respondents who are involved with setting, managing, and/or implementing cybersecurity/security strategies, and/or performance metrics and are planning to use genAI in the next year or are currently using genAI. Source: A commissioned study conducted by Forrester Consulting on behalf of Tenable, October 2023

IT and security leaders are optimistic about GenAI

The survey measured security professionals' confidence in their organization's ability to use GenAI for cybersecurity.

The responses show that IT and security leaders are pretty confident in using GenAI to improve their cybersecurity strategy, with 44% either extremely confident or very confident. 

This shows that the relatively new GenAI category is quickly gathering momentum and will soon be (if it isn’t already) table stakes for cybersecurity.

Graph shows confidence in AI among organizations
Question: How confident are you in your organization's ability to successfully leverage genAI for the purpose of improving your organization's cybersecurity/security strategy?Base: 761 respondents who are involved with setting, managing, and/or implementing cybersecurity/security strategies, and/or performance metrics and are planning to use genAI in the next year or are currently using genAI. Source: A commissioned study conducted by Forrester Consulting on behalf of Tenable, October 2023

GenAI is helping with security today

Let’s look at how Tenable customers can use GenAI in their everyday work, right now.

Ask questions, get answers

Tenable AI Assistant in action

With Tenable AI Assistant, built into ExposureAI, you can use simple prompts, like What can you tell me about this asset? and Does this asset have any exploitable vulnerabilities? to get immediate answers. 

Attack path summarizations level the playing field

Image shows attack path summarizations

The experience levels of analysts vary widely. Some come from adjacent security industries and some have very specific domain expertise. With ExposureAI, you don’t need a PhD in Attack Path Analysis to understand your risk. You just click on a node and the assistant takes it from there.

Mitigation guidance helps solve the problem

Image shows how mitigation guidelines work in platform

Once you’ve identified the issues, you’re often left with a big Now What? ExposureAI provides specific guidelines to mitigate the risk as well as a step-by-step process you can follow along with best practices you can turn to for advice. 

 

Beyond the GenAI hype

We’re well on our way down the path of genAI and there’s no denying the hype surrounding it. It’s one of those shiny new things that the media loves to report on. But beyond the hype, there are real benefits that customers can get from GenAI. At Tenable, we have been focused on utilizing its power to help our customers better secure their enterprises. 

But we’re only at the beginning. There’s more work to do. There’s more functionality to uncover and execute on our platform vision. And there are many more use cases to serve. 

相關文章

您可以利用的網路安全最新消息

輸入您的電子郵件,就不會錯過來自 Tenable 專家提供的及時警示與安全指引。

Tenable Vulnerability Management

享受現代、雲端型的弱點管理平台,能夠以無與倫比的準確性查看和追蹤所有資產。

除了阿拉伯聯合大公國外,在世界各地建立的 Tenable Vulnerability Management 試用版均包含 Tenable Lumin 及 Tenable Web App Scanning。

Tenable Vulnerability Management

享受現代、雲端型的弱點管理平台,使您能夠以無與倫比的準確性查看和追蹤所有資產。 立即訂閱一年。

100 項資產

選取您的訂閱選項:

立即購買

Tenable Vulnerability Management

享受現代、雲端型的弱點管理平台,能夠以無與倫比的準確性查看和追蹤所有資產。

除了阿拉伯聯合大公國外,在世界各地建立的 Tenable Vulnerability Management 試用版均包含 Tenable Lumin 及 Tenable Web App Scanning。

Tenable Vulnerability Management

享受現代、雲端型的弱點管理平台,使您能夠以無與倫比的準確性查看和追蹤所有資產。 立即訂閱一年。

100 項資產

選取您的訂閱選項:

立即購買

Tenable Vulnerability Management

享受現代、雲端型的弱點管理平台,能夠以無與倫比的準確性查看和追蹤所有資產。

除了阿拉伯聯合大公國外,在世界各地建立的 Tenable Vulnerability Management 試用版均包含 Tenable Lumin 及 Tenable Web App Scanning。

Tenable Vulnerability Management

享受現代、雲端型的弱點管理平台,使您能夠以無與倫比的準確性查看和追蹤所有資產。 立即訂閱一年。

100 項資產

選取您的訂閱選項:

立即購買

試用 Tenable Web App Scanning

享受完整存取我們專為新型應用程式所設計、屬於 Tenable One 曝險管理平台一部分的最新 Web 應用程式掃描產品。不需耗費大量人力或中斷重要 Web 應用程式,即可高度準確且安全地掃描您整個線上產品系列中是否含有任何弱點。 立即註冊。

您的 Tenable Web App Scanning 試用版軟體也包含 Tenable Vulnerability Management 和 Tenable Lumin。

購買 Tenable Web App Scanning

享受現代、雲端型的弱點管理平台,使您能夠以無與倫比的準確性查看和追蹤所有資產。 立即訂閱一年。

5 個 FQDN

$3,578

立即購買

試用 Tenable Lumin

利用 Tenable Lumin 視覺化並探索您的曝險管理、追蹤經過一段時間後風險降低的情形以及與同業進行指標分析。

您的 Tenable Lumin 試用版軟體也包含 Tenable Vulnerability Management 和 Tenable Web App Scanning。

購買 Tenable Lumin

聯絡業務代表,瞭解 Tenable Lumin 如何協助您取得您整個環境的深入解析和管理網路風險。

免費試用 Tenable Nessus Professional

免費試用 7 天

Tenable Nessus 是目前市場上最全方位的弱點掃描器。

最新 - Tenable Nessus Expert
現已上市

Nessus Expert 新增了更多功能,包括外部攻擊破綻掃描和新增網域及掃描雲端基礎架構的能力。按這裡試用 Nessus Expert。

請填妥以下表單以繼續 Nessus Pro 試用。

購買 Tenable Nessus Professional

Tenable Nessus 是目前市場上最全方位的弱點掃描器。Tenable Nessus Professional 可協助將弱點掃描流程自動化,節省您執行合規工作的時間並讓您與 IT 團隊合作。

購買多年期授權,節省更多。新增 365 天全年無休 24 小時全天候可使用電話、社群及對談的進階支援。

選擇您的授權

購買多年期授權,節省更多。

增加支援與訓練

免費試用 Tenable Nessus Expert

免費試用 7 天

Nessus Expert 是專為現代攻擊破綻所打造,它能讓您從 IT 到雲端洞察更多資訊,並保護貴公司免於弱點危害。

您已經有 Tenable Nessus Professional 了嗎?
升級至 Nessus Expert,免費試用 7 天。

購買 Tenable Nessus Expert

Nessus Expert 是專為現代攻擊破綻所打造,它能讓您從 IT 到雲端洞察更多資訊,並保護貴公司免於弱點危害。

選擇您的授權

購買多年期授權省更多!

增加支援與訓練