CyberAlly: Leveraging LLMs and Knowledge Graphs to Empower Cyber Defenders
Fuente:
arXiv
Gespeichert in:
| Hauptverfasser: | , , , , , , , , , |
|---|---|
| Format: | Preprint |
| Veröffentlicht: |
2025
|
| Schlagworte: | |
| Online-Zugang: | |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| _version_ | 1866912319500451840 |
|---|---|
| author | Kim, Minjune Wang, Jeff Moore, Kristen Goel, Diksha Wang, Derui Mohsin, Ahmad Ibrahim, Ahmed Doss, Robin Camtepe, Seyit Janicke, Helge |
| author_facet | Kim, Minjune Wang, Jeff Moore, Kristen Goel, Diksha Wang, Derui Mohsin, Ahmad Ibrahim, Ahmed Doss, Robin Camtepe, Seyit Janicke, Helge |
| contents | The increasing frequency and sophistication of cyberattacks demand innovative approaches to strengthen defense capabilities. Training on live infrastructure poses significant risks to organizations, making secure, isolated cyber ranges an essential tool for conducting Red vs. Blue Team training events. These events enable security teams to refine their skills without impacting operational environments. While such training provides a strong foundation, the ever-evolving nature of cyber threats necessitates additional support for effective defense. To address this challenge, we introduce CyberAlly, a knowledge graph-enhanced AI assistant designed to enhance the efficiency and effectiveness of Blue Teams during incident response. Integrated into our cyber range alongside an open-source SIEM platform, CyberAlly monitors alerts, tracks Blue Team actions, and suggests tailored mitigation recommendations based on insights from prior Red vs. Blue Team exercises. This demonstration highlights the feasibility and impact of CyberAlly in augmenting incident response and equipping defenders to tackle evolving threats with greater precision and confidence. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2504_07457 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | CyberAlly: Leveraging LLMs and Knowledge Graphs to Empower Cyber Defenders Kim, Minjune Wang, Jeff Moore, Kristen Goel, Diksha Wang, Derui Mohsin, Ahmad Ibrahim, Ahmed Doss, Robin Camtepe, Seyit Janicke, Helge Cryptography and Security The increasing frequency and sophistication of cyberattacks demand innovative approaches to strengthen defense capabilities. Training on live infrastructure poses significant risks to organizations, making secure, isolated cyber ranges an essential tool for conducting Red vs. Blue Team training events. These events enable security teams to refine their skills without impacting operational environments. While such training provides a strong foundation, the ever-evolving nature of cyber threats necessitates additional support for effective defense. To address this challenge, we introduce CyberAlly, a knowledge graph-enhanced AI assistant designed to enhance the efficiency and effectiveness of Blue Teams during incident response. Integrated into our cyber range alongside an open-source SIEM platform, CyberAlly monitors alerts, tracks Blue Team actions, and suggests tailored mitigation recommendations based on insights from prior Red vs. Blue Team exercises. This demonstration highlights the feasibility and impact of CyberAlly in augmenting incident response and equipping defenders to tackle evolving threats with greater precision and confidence. |
| title | CyberAlly: Leveraging LLMs and Knowledge Graphs to Empower Cyber Defenders |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2504.07457 |