信息通信技术与政策2024，Vol.50Issue(8)：24-31,8.DOI:10.12267/j.issn.2096-5931.2024.08.004
生成式人工智能赋能网络安全运营降噪能力研究
Research on generative artificial intelligence empowering cybersecurity operations with noise reduction capability
孟楠 1周成胜 1赵勋1
作者信息
- 1. 中国信息通信研究院安全研究所,北京 100191
- 折叠
摘要
Abstract
Against the backdrop of the digital age,the challenges faced by cybersecurity are increasing,with alarm fatigue becoming a prominent issue.Traditional alarm handling methods suffer from low efficiency due to their inability to effectively distinguish between real and false threats.The adoption of generative artificial intelligence(AI)technology not only allows for more accurate identification of security threats and reduction in false alarms but also enhances the efficiency of handling security events.Moreover,AI's capability in data analysis aids security teams in more effectively addressing complex security incidents,thereby improving the overall level of network security.Despite the challenges of accuracy and interpretability faced by AI technology in practical applications,the introduction of the LLM agent noise reduction system,which integrates the capabilities of both large and small models,combined with alert situation awareness and knowledge database data,can achieve efficient alarm processing.关键词
生成式人工智能/告警降噪/大型语言模型代理/告警疲劳Key words
generative artificial intelligence/alarm noise reduction/LLM agent/alarm fatigue分类
信息技术与安全科学引用本文复制引用
孟楠,周成胜,赵勋..生成式人工智能赋能网络安全运营降噪能力研究[J].信息通信技术与政策,2024,50(8):24-31,8.
