Microsoft has incorporated the OpenAI GPT-4 generative AI model into its Security Copilot protective suite. Currently in preview mode, the AI security tool is equipped to respond to inquiries regarding vulnerabilities and reverse-engineer issues.
As AI technology continues to expand in the tech industry, Microsoft’s Security Copilot provides a valuable solution for IT departments facing staff shortages and skills gaps. Appearing as a prompt bar, the chatbot is capable of coding and code analysis using natural language. It also has the capability to provide summaries of incidents, URLs, or code snippets, and generate reports that can be shared.
Compatible with various Microsoft security offerings, including Sentinel, Defender, and Intune, Security Copilot is also equipped with privacy and security features similar to Azure Hyperscale infrastructure. However, for decision-makers looking to deploy AI to their team, it is important to establish a framework that ensures human oversight before code is implemented. This is due to the fact that AI models rely on probabilistic algorithms and may not always produce accurate results.
In March 2023, OpenAI experienced a data breach resulting from a bug in an open-source library. As a result, the Future of Life Institute opened a petition, signed by more than 1,700 individuals, including Elon Musk and Steve Wozniak, that calls for AI companies like OpenAI to halt the training of AI systems more advanced than GPT-4 for at least six months. The goal is to create safety protocols to prevent potential risks associated with AI, including militarization.
Although Google has not yet revealed an AI product specifically for enterprise security, Microsoft announced in January 2023 that their cybersecurity division is now a $20 billion enterprise. Meanwhile, other security companies, such as Kubescape, ARMO, Orca Security, and Skyhawk Security, have incorporated OpenAI’s conversational tool into their products.
Overall, AI has both advantages and disadvantages in terms of security, as attackers can also use it to their advantage. It is important for companies to assess whether the technology benefits the business financially and ensures asset protection and compliance obligations are met.
