4 ms·

AI is ideal for cybersecurity, if it's implemented correctly. Unknown Zero days could be prevented and detected. Now if you're plugging in an LLM with MCP, just

AI is ideal for cybersecurity, if it's implemented correctly. Unknown Zero days could be prevented and detected. Now if you're plugging in an LLM with MCP, just give up. In fact, they've been around for a long time: ML classifiers for malware detection (static + behavioral), anomaly detection for network traffic and endpoint behavior, predictive models for fraud prevention in e-retail, automated correlation of SIEM events for professional review. Then came LLMs and now you have VCs trying to plug in logs and Jira to their product... researchers say.

zwnow 1y ago
Because LLMs 100% work correct everytime. They would never lie to you or make stuff up (Replit). Im so tired of LLM enthusiasts not seeing the issues with them and trying to make them solve everything. We need another todo app, this time with LLMs though!!! Fuck the energy consumption of this technology. Private companies want to build nuclear power plants? What could go wrong? Yall need a reality check.
- Mountain_Skies 1y ago
  False positives undermine support for tools, LLM or not. I suspect that's what's going to kill off lots of these products, as humans endlessly chase after LLM hallucinations like the very early days of virus scanners that flagged every disk write as something that needed human approval. While it's possible AI security tools can discover patterns of infiltration behavior that a humans would overlook, it doesn't go much good if the reports are buried in mountains of intrusion fantasies. But lots of money will be made before the decision makers realize that the vendor promises don't come to fruition and headcount has to increase to manage use of the tools.
  - neuroelectron 1y ago
    Right, I specifically mentioned LLMs because they're not the correct tool for the job. There's plenty of application specific models that are much more aligned for the task, and hundreds terabytes of logs they can be trained on.
jsnider3 1y ago
> AI is ideal for cybersecurity, if it's implemented correctly. I can tell you right now, that it's not going to be implemented correctly.
- nicce 1y ago
  My code has always perfect security if I just write it correctly.

zwnow 1y ago

Because LLMs 100% work correct everytime. They would never lie to you or make stuff up (Replit). Im so tired of LLM enthusiasts not seeing the issues with them and trying to make them solve everything. We need another todo app, this time with LLMs though!!! Fuck the energy consumption of this technology. Private companies want to build nuclear power plants? What could go wrong? Yall need a reality check.

Mountain_Skies 1y ago
False positives undermine support for tools, LLM or not. I suspect that's what's going to kill off lots of these products, as humans endlessly chase after LLM hallucinations like the very early days of virus scanners that flagged every disk write as something that needed human approval. While it's possible AI security tools can discover patterns of infiltration behavior that a humans would overlook, it doesn't go much good if the reports are buried in mountains of intrusion fantasies. But lots of money will be made before the decision makers realize that the vendor promises don't come to fruition and headcount has to increase to manage use of the tools.
- neuroelectron 1y ago
  Right, I specifically mentioned LLMs because they're not the correct tool for the job. There's plenty of application specific models that are much more aligned for the task, and hundreds terabytes of logs they can be trained on.

jsnider3 1y ago

> AI is ideal for cybersecurity, if it's implemented correctly. I can tell you right now, that it's not going to be implemented correctly.

nicce 1y ago
My code has always perfect security if I just write it correctly.