Palo Alto Networks Adds Bring Your Own AI Capability To Cortex XSIM Platform

Logo Cortex XSIAM Palo Alto Networks (photo: Palo Alto Networks)

JAKARTA - In the past, maybe cybercriminals took a long time to collect data from an organization they participated in. But now, more advanced technology, cybercriminals are also increasingly sophisticated in carrying out their actions.

Currently, Palo Alto Networks sees that cybercriminals only take hours. This causes the company to take an average of about 5.5 days to address the initial incident.

"The speed of the striker's movement, coupled with new regulatory requirements such as the SEC Mandate, requires public companies to disclose significant cybersecurity incidents that cause material losses within four days of being found, making cyber threat handling impossible with a manual approach," said Goren Fink, Senior Vice President, Cortex Products, Palo Alto Networks.

Since its launch, Cortex XSIM has assisted customers in revolutionizing the company's security operations hub (SOC). However, to improve the AI-based security operations platform, Palo Alto Networks launched Cortex XSIM 2.0, which includes the latest bring-your-own machine learning (BYOML) framework.

The BYOML Framework feature will allow security teams to create and integrate their own ML models into XSIM to add unique use cases such as fraudulent detection, security research, and advanced data visualization.

In addition, XSIM 2.0 also includes new features that allow organizations to address the latest security operations challenges through increasing visibility and determining threat priorities.

Then, with the latest ATT&CK Coverage MITRE dashboard, organizations can quickly measure their defenses thoroughly against a series of tactics and techniques carried out by threat actors and channel their efforts to strengthen their security posture.

"By using artificial intelligence and automation, XSIM 2.0 is able to overcome the handling of this cyber threat by reducing operational complexity, stopping threats on a large scale, and accelerating the time it takes to tackle incidents," concluded Fink.