Cisco uses AI and eBPF for automated security operations

TLDR:

• Cisco has launched Cisco Hypershield, a framework that uses AI and eBPF to automate security operations.
• The framework leverages AI to test software patches in a digital twin before deploying them to ensure applications don’t break.

Cisco Hypershield utilizes eBPF in the Linux kernel to deploy an AI inference engine that analyzes the application environment. It automatically applies patches if they pass tests in the digital twin. The framework aims to create a parallel data plane for managing cybersecurity, offloading security processing from application processors. By working with NVIDIA on a cybersecurity AI framework, Cisco aims to detect anomalies and apply cybersecurity policies across an autonomous segmented network in minutes.

Automating patch management with AI is crucial in an era where vulnerabilities are exploited rapidly. Cisco’s use of AI to automate testing and deployment of patches marks a significant advancement in cybersecurity. As more organizations adopt eBPF-supported operating systems, the overall state of cybersecurity is expected to improve in the age of AI.

Full Article:

Cisco has introduced a new framework called Cisco Hypershield that utilizes artificial intelligence (AI) and extended Berkley Packet Filtering (eBPF) to automate security operations. The framework tests software patches in a digital twin before deployment to ensure the application environment remains stable. By leveraging eBPF running in the Linux kernel, Cisco Hypershield deploys an AI inference engine to analyze and remediate vulnerabilities in the application environment.

The acquisition of Isovalent, a network virtualization software provider based on eBPF, enables Cisco to build and deploy Hypershield on hardware accelerators such as data processing units (DPUs). Working with NVIDIA on the Morpheus cybersecurity AI framework, Cisco can swiftly apply cybersecurity policies across an autonomous segmented network utilizing a microservices-based architecture.

Automating patch management is crucial as cybercriminals exploit vulnerabilities rapidly after disclosure. By automating the testing and deployment of patches, Cisco aims to enhance cybersecurity defenses. As more organizations update their operating systems to support eBPF, the overall state of cybersecurity is expected to improve with the integration of AI-driven solutions.