Vouchsec - Conversational XDR Platform for the AI Era

Vouchsec - AI 时代的对话式 XDR 平台

• 批准号: 10098686
• 金额: $ 7.64万
• 依托单位: UNIVERSITY OF OXFORD
• 依托单位国家: 英国
• 项目类别: Collaborative R&D
• 财政年份: 2023
• 资助国家: 英国
• 起止时间: 2023 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=10098686
• 关键词: Vouchsec; Conversational; XDR; Platform; AI

Vouchsec offers a solution that shortens cyber threat processing time tenfold and detects emerging AI-powered attacks. The main target market are security operation centres (SOCs), that can be either in-house company divisions or part of external managed security service providers (MSSPs).SOCs are dissatisfied with security talent shortage and quality of cyber defence tools due to: slow threat detection time, inability to detect new types of threats, high number of alerts (mostly false positives), long threat processing time, lack of visibility and interoperability between siloed solutions.Our new type of an extended detection & response (XDR) technology provides a unified conversational platform to manage cyber incidents which reduces threat processing time tenfold, upskills security analysts, provides integrations with other cyber security tools and includes a component that detects malicious events two times faster and identifies AI-powered attacks.Unlike current XDR solutions, Vouchsec detects attributable malicious behaviours (not anomalies or outliers), subtle AI-powered mimicking attacks, and exposes correlated data via natural language interaction (conversational security). This means that it is possible to talk to it in English which drastically cuts down the threat processing time and allows to employ and upskill less experienced security talent.

Sparkchsec提供了一种解决方案，可以将网络威胁处理时间缩短十倍，并检测新兴的人工智能攻击。主要目标市场是安全运营中心（SOC），这些中心可以是公司内部部门，也可以是外部管理安全服务提供商（MSSP）的一部分。SOC对安全人才短缺和网络防御工具的质量感到不满，原因是：威胁检测速度慢，无法检测新类型的威胁，警报数量多（大多数是误报）、威胁处理时间长、孤立解决方案之间缺乏可见性和互操作性。我们的新型扩展检测和响应（XDR）技术提供了一个统一的对话平台来管理网络事件，将威胁处理时间缩短了十倍，与当前的XDR解决方案不同，Webchsec可以检测可归因的恶意行为（而不是异常或离群值）、微妙的人工智能模仿攻击，并通过自然语言交互（会话安全）暴露相关数据。这意味着可以用英语与它交谈，这大大缩短了威胁处理时间，并允许雇用和提升经验不足的安全人才。