AIPITCH - AI-Powered Innovative Toolkit for Cybersecurity Hubs

 

The project aims to create advanced artificial intelligence-based tools that will improve the operations of cybersecurity teams (e.g., sector-level or national-level CSIRT teams, or SOC teams in companies and institutions). These tools will enable faster detection, analysis, and neutralization of threats. We plan to develop intelligent early warning systems, an AI chatbot for analyzing incident reports, and datasets representing current cyberattacks. Work on these solutions has just begun, involving teams from Poland, Luxembourg, the Netherlands, and Italy.

 

AIPITCH aims to create a comprehensive set of tools supporting key operational services in cyber defense. These include technologies for early threat detection, automatic malware classification, and improvement of analytical processes through the integration of Large Language Models (LLM). The project has the potential to set new standards in the cybersecurity industry.

 

The project’s expected outcomes include:

• AI Chatbot: An intuitive tool for quick and convenient reporting of incidents and suspicious activities. Using artificial intelligence, the chatbot will conduct a preliminary analysis of reports, speeding up a threat response.
• Early Warning Systems: These tools will automatically detect new vulnerabilities and their potential exploits, phishing campaigns, and other threats, enabling cybersecurity operational teams to respond before the threat develops.
• Big Data Analysis: Using large language models to process vast amounts of data from security systems, threat reports, and various sources. This will allow for quick identification of new vulnerabilities and attack trends.
• AI Integration with Key Operational Processes: This involves incorporating advanced AI tools into processes such as network traffic monitoring, log analysis, incident response, and risk assessment. This will make routine tasks faster and more precise, freeing up analysts to focus on more complex issues.
• Large-scale Threat Datasets: Extensive repositories containing information about attacks, vulnerabilities, tools used by cybercriminals, and malware samples. By using a global network of sensors, large amounts of data reflecting current attack trends will be collected. This will enable training of AI models that can predict and counteract new types of threats, significantly increasing the level of protection of IT systems.

 

The project leader is NASK National Research Institute. The international consortium includes:

• CIRCL (Computer Incident Response Center Luxembourg), Luxembourg
• The Shadowserver Foundation, Netherlands
• NCBJ (National Centre for Nuclear Research), Poland
• ABI LAB (Centre of Research and Innovation for Banks), Italy

The total project budget is 7,983,377 euros. It was launched at the beginning of 2025 and the work will continue for three years.