New Generative AI Assistant by Sysdig Takes Cloud Security to the Next Level

By Greg Tavarez, TMCnet Editor  |  July 31, 2023

Generative AI is often a topic of discussion in the workplace today, and sometimes even at home among family and friends. It makes sense considering the global generative AI market is projected to reach $191.8 billion by 2032, growing at a CAGR of 34.1% from 2023 to 2032, according to an Allied Market Research report.

Most are aware that generative AI can create original content. What some might not know is that is does provide security. Generative AI has the potential to enhance security by generating strong passwords, detecting anomalies and malware, identifying phishing and spam, filtering harmful content, improving network security, creating synthetic data for testing and enhancing biometric authentication.

However, responsible AI practices and ethical considerations are vital to prevent misuse and privacy concerns, as generative AI can also be employed for malicious purposes, emphasizing the need for constant monitoring and updates to stay ahead of potential threats.

To overcome those challenges with security, Sysdig, a cloud security company leveraging runtime insights, unveiled Sysdig Sage, an innovative generative AI assistant tailored specifically for cloud security.

Going beyond traditional AI chatbots, Sysdig Sage incorporates multistep reasoning and multidomain correlation to swiftly identify, prioritize, and remediate cloud-specific risks. The AI assistant can uncover concealed connections between risks and security events that might otherwise evade detection.

Unlike conventional AI chatbots that rely on singular queries and stateless analysis, Sysdig Sage adopts a unique human-to-AI controller, allowing for advanced and personalized recommendations. The generative AI architecture encompasses several key features to enhance cloud security.

Sysdig Sage utilizes multistep reasoning, an iterative process that provides relevant context to uncover hidden connections, prioritize risks and expedite investigations. For example, it adeptly explores risk factors across multiple attack paths, even tracing seemingly insignificant events that collectively pose substantial risks.

Through multidomain correlation, Sysdig Sage aggregates and analyzes telemetry from various domains, such as vulnerabilities, compliance, permissions, and runtime. This eliminates the need for context switching between multiple tools and simplifies data access, enabling timely and informed decision-making.

The AI assistant incorporates the collective wisdom of the Falco open-source community, seamlessly integrating with the user's environment. By optimizing Falco detection rules, Sysdig Sage can detect threats and attacks early on, leveraging the industry-proven open-source solution for cloud threat detection.

Sysdig Sage goes beyond detection, taking proactive actions after assessing risks and priorities. Drawing insights from comprehensive investigations, the AI assistant offers recommended actions, allowing users to grant approval for execution and saving crucial time during potential attacks.

“Generative AI has the power to improve security, but it must be harnessed in a way that addresses the unique challenges of the cloud,” said Loris Degioanni, founder and chief technology officer of Sysdig. “With Sysdig Sage, we are adding the power of generative AI to our cloud security platform to help practitioners by empowering them with cloud security expertise, uncovering hidden security connections that are otherwise not obvious, and ultimately helping them work smarter and respond faster.”

Sysdig Sage equips businesses with a robust and intelligent tool to fortify their cloud environments proactively. The unique generative AI architecture empowers security teams to stay ahead of potential threats, enhancing overall cybersecurity measures for cloud-based systems.


Edited by Greg Tavarez
Get stories like this delivered straight to your inbox. [Free eNews Subscription]