
Logpresso , a cloud SIEM specialist, announced on the 9th that it is participating in the Information Protection Core Source Technology Development Project hosted by the Ministry of Science and ICT and the National IT Industry Promotion Agency, and is researching and developing generative AI technology specialized in cybersecurity.
This project aims to develop a small Generative Language Model (sLLM) based on Augmented Search Generation (RAG), focusing on vulnerability analysis, anomaly detection, security management, and threat intelligence. Through this, the project aims to secure AI-based security automation and intelligence technologies and build a security-specific LLM model and verification platform to suppress AI malfunctions.
The total project cost is 10 billion won, and research and development began in April of last year and will run for four years. Sands Lab is overseeing the project, with Logpresso, LG Uplus, the Korea Advanced Institute of Science and Technology (KAIST), and Forty2Maru participating as joint research institutes. These research institutes are developing specific technologies, including AI-based threat intelligence, automated security event analysis, anomaly detection models, and a RAG-based security Q&A service.
Logpresso develops generative AI models specialized in the security control field and advances integrated security operations technology. In particular, it is developing a model that uses natural language commands to control security equipment and automate threat response, based on its SIEM platform.
We are also focusing on building a next-generation security operating system that enables real-time threat detection and automatic response in various environments by advancing data linkage and correlation analysis technologies between heterogeneous systems.
Yang Bong-yeol, CEO of Logpresso, stated, "This research is significant in that it combines AI and security for practical applications. We will leverage generative AI to enhance the accuracy of security analysis and complete an intelligent security operations system." He added, "Our goal is to strengthen domestic technological competitiveness in response to the changing global security environment and improve the efficiency of security operations in both the public and private sectors."
- See more related articles
You must be logged in to post a comment.