14-05-2025
Artificial Intelligence Aids in Cyber Attack Prevention
Home » Emerging technologies » Artificial Intelligence » Artificial Intelligence Aids in Cyber Attack Prevention
Positive Technologies has announced the findings of a recent study analyzing the key applications of Artificial Intelligence in cybersecurity. The report revealed that AI can be applied to over half of the countermeasures listed in the MITRE D3FEND framework.
The study found that 28% of existing countermeasures already use AI support, while another 27% are expected to be integrated with AI solutions that are currently in development.
According to experts at Positive Technologies, Artificial Intelligence allows defenders to identify, predict, and prevent cyberthreats more efficiently. For instance, AI helps protect sensitive data by recognizing classified information in documents and adapting the content based on the user's access level.
In addition, the company reported that AI tools can be used for automated security testing. In their product PT Dephaze, generative AI generates likely passwords for specific targets, analyzes text files, and compiles detailed reports.
Currently, AI is widely used for detecting cyberthreats. It analyzes user behavior, network traffic, and executable files. The study indicated that in the near future, AI may also help gather network intelligence and detect unauthorized software or services that escape the notice of IT teams.
Positive Technologies stated that AI will likely enable more realistic simulations of user behavior, assist in deploying honeypots, and support continuous biometric authentication. Tools like MaxPatrol VM are already helping organizations maintain up-to-date infrastructure data.
A major benefit of Artificial Intelligence in cybersecurity is its ability to detect unknown threats. For example: PT Sandbox uses behavioral analysis to identify anomalies.
MaxPatrol SIEM includes BAD (Behavioral Anomaly Detection), which tracks zero-day exploits and new malware.
Roman Reznikov, Cybersecurity Research Analyst at Positive Technologies, commented that the goal is to embed AI as an 'autopilot' to speed up incident response and reduce pressure on security teams. He added that this concept was successfully tested during the Standoff 13 cyberbattle, where MaxPatrol O2 prevented breaches by detecting attacks on a simulated infrastructure.
Moreover, the company noted that AI helps SOC teams make faster decisions by providing context for alerts and suggesting appropriate responses. MaxPatrol O2 automatically creates action plans and offers options for handling incidents with varying degrees of human input.
However, Positive Technologies warned that the use of AI comes with challenges. High-quality training data and skilled professionals are essential. While AI strengthens defenses, it may also become a target for attackers. Therefore, the company recommends a responsible approach to AI adoption, considering risks and following best practices for cybersecurity.
