LLM-based Assistant for L-x Security Operation Center (SOC) Analyst (Internship) King Abdullah University of Science and Technology (KAUST)

Overview

There is a notable increase in cyberattacks, targeting vital digital services like energy, water, oil plants, communication and transportation infrastructure, etc. 

The lack of right cybersecurity and resilience solutions can transform the blessing of the digital transformation into a curse, thus leaving significant societal threats and economic damage. Security Operation Centers (SOC) are therefore becoming a necessary part of every digital and critical infrastructure with the main roles of defining cybersecurity policies, processes, and implementing detection and response mechanisms and tools. 

Existing SOC tools like SIEM/SOAR/XDR are mainly good at the detection part, whereas human analysts are still required to investigate and respond on each potential vulnerability or threat event. Analysis can have different levels of responsibilities, e.g., L1 escalates first checked vulnerability alerts to L2 for further investigation. 

With the advent of LLM, they envision a great opportunity to build an analyst assistant GPT tool that can infer additional insights and partial auto investigations from the data and environment. Discover everything with this  LLM-based Assistant for L-x Security Operation Center (SOC) Analyst (Internship) project from King Abdullah University of Science and Technology (KAUST) .

Recommended Student Background

• Cyber Security

• AI, LLM

• SOC