The impact of AI on CTI

It has been widely assumed in the CTI community that attackers are taking advantage of AI to discover new vulnerabilities and build exploits, and to conduct convincing phishing attacks.

Recent reporting has shown that many nation state actors are using AI to analyse their own intelligence gathering (hijacked messages, phising results etc) and using that to futher their agenda.

On the side of the defenders, the use of LLMs has become more prevalent in triaging, filtering, and reporting on IOCs and analysing the attack chains, as well as combining and cross referencing. What are the challenges that this use raises in the real world, are there harms that result from inaccurate reporting, missed or hallucinated results and the delegation of tasks to AI agents at scale. This panel will discuss these topics and look at real world answers to these questions.

Thu Nov 12 / 10:00 - 10:45 EET

CERT Panel: The impact of AI on Cyber Threat Intelligence
05. Roman Zaitsev - Deputy Head of the Unit of the Department of the State Cyber Protection Centre, SSSCIP

Roman Zaitsev

Deputy Head of the Unit of the Department of the State Cyber Protection Centre, SSSCIP

Roman Zaitsev is Deputy Head of the CTI & Malware Analysis Unit at CERT-UA, the Computer Emergency Response Team of Ukraine. He has been with CERT-UA since 2019, with experience spanning incident response, malware analysis, and cyber threat intelligence. In his current role, he coordinates CTI and malware analysis activities and works on threat hunting, campaign tracking and clustering, attribution assessment, and intelligence sharing.

Dana Ludviga

Project Manager and Information systems security analyst, CERT.LV

Join us at EECD Vilnius

Discover the latest trends in cybersecurity and network with industry experts.

Discover ESET Research