After Bing and GitHub Copilot, Microsoft presented another tool powered by OpenAI’s GPT-4 generative artificial intelligence: Microsoft Security Copilot. This tool combines the ChatGPT language model (LLM) with a Microsoft security-specific model. This security-specific model in turn incorporates a growing set of security-specific skills and is informed by Microsoft’s global threat intelligence and more than 65 trillion daily signals, Redmond says. Security Copilot runs on Azure’s hyperscale infrastructure.
Our cyber-trained model adds a learning system to create and refine new skillssays Microsoft. Security Copilot can then help detect what other approaches might miss and increase an analyst’s workload. In a typical incident, this improvement results in gains in terms of quality of detection, speed of response and ability to reinforce security.
Security Copilot also integrates with end-to-end Microsoft Security products, and over time it will expand to a growing ecosystem of third-party products, Microsoft says.
Security Copilot presents itself as a dialogue interface in which the user expresses in natural language questions such as What are all the incidents occurring in my company? It is possible to request a memo relating to a vulnerability. The user can submit files or URLs, or code samples and request information regarding them. It is still possible to query Microsoft Security Copilot regarding alerts from other enterprise security tools. Security Copilot responses are provided from data internal or external to the company. Security Copilot specifies the source of the data used.
Does this mean that system administrators will soon no longer need to examine their logs? Not so sure. Microsft puts a downside: Security Copilot doesn’t always do everything right. AI-generated content may contain errors. But Security Copilot is a closed-loop learning system, which means it continually learns from users and gives them the opportunity to give meaningful feedback through the feedback feature built right into the tool. As we continue to learn from these interactions, we adjust their responses to create more consistent, relevant, and useful responses.
In short, it is the users who train Security Copilot. Microsoft ensures that corporate data remains protected.
Microsoft Security Copilot, available in preview, has a official site.