Microsoft has introduced new chat tools that use artificial intelligence (AI) to help cybersecurity teams prevent and respond to cyberattacks. The tools, known as Copilots, utilize OpenAI's latest language system, GPT-4, and data specific to the security field to enable security workers to quickly identify connections between various parts of a hack, such as a suspicious email, malicious software file, or compromised system components. While machine-learning techniques have been used to detect suspicious behavior and identify vulnerabilities for years, the latest AI technologies allow for faster analysis and enable non-experts to use plain English questions.
According to Vasu Jakkal, Microsoft's VP for security, compliance, identity, and privacy, the shortage of workers with the necessary cybersecurity skills makes the latest AI-powered chat tools crucial. Meanwhile, hackers have become faster and more efficient in their attacks since the start of the pandemic. For instance, it now takes an average of one hour and 12 minutes for an attacker to gain full access to a user's inbox once they've clicked on a phishing link, compared to weeks or months before.
The chat tools, or Copilots, allow users to ask questions such as "How can I contain devices that are already compromised by an attack?" and list anyone who sent or received an email with a dangerous link before and after the breach. The tools can also generate reports and summaries of the incident and the response more easily.
Microsoft is launching new chat tools, called Copilots, which use OpenAI's GPT-4 language system and data specific to cybersecurity to help teams fight against hacks and assist with the cleanup after an attack. The tool enables security workers to identify connections between various parts of a hack more quickly, such as a suspicious email or malicious software file. There is currently a shortage of workers with the required cybersecurity skills and the newest AI technologies allow for faster analysis, as well as the ability to use plain English questions, making it easier for employees who may not be experts in security or AI.
The initial access to the tool will be given to a few customers, but more will be added later. The Security Copilot uses data from government agencies and Microsoft's researchers and will work with Microsoft's security products, with integration with programs from other companies planned in the future. Microsoft is also taking care to ensure that users are aware that the new systems are prone to errors. The chatbot is capable of learning from users and allows customers to choose privacy settings and determine how widely they want to share the information it gleans.