AI-Powered Innovative Toolkit for Cybersecurity Hubs (AIPITCH)

The project is implemented from the DIGITAL-ECCC-2024-DEPLOY-CYBER-06-ENABLINGTECH program and relates to the sub-theme “Novel applications of AI and Other Enabling Technologies for Security Operation Centres,” with the main goal of providing a comprehensive set of artificial intelligence-based tools to support the key services of operational teams responsible for cyber defense. Special emphasis will be placed on the operations of SOC/CSIRT teams responsible for national security, but internal teams responsible for the security of companies and institutions will also be able to use them.

The project will carry out a series of research and development as well as implementation work, including but not limited to:

1. Providing a secure and user-friendly high-quality artificial intelligence-based chatbot tool designed to receive reports on cyber security incidents and threats.
2. Using artificial intelligence tools to provide the SOC/CSIRT with early warning and classification of the latest exploits, malware and phishing campaigns.
3. Using large-scale language models (LLMs) to extract information from unstructured vulnerability information and exploit source code to identify new exploit campaigns.
4. Improving cybersecurity operations by integrating AI and LLM functions into key tools and processes.
5. Creating large-scale datasets of recent attacks on internet-connected devices. These datasets will be used to train AI models on the latest threats and trends, which is essential for AI-based threat detection and response.

NASK is the leader of the consortium, and it is made up of the organizations:

• CIRCL/ LHC (Computer Incident Response Center Luxembourg)
• Shadowserver Foundation (Stichting The Shadowserver Foundation Europe)
• NCBJ (National Center for Research and Development)
• ABI LAB

The project’s budget is €7,983,377, of which NASK PIB accounts for €2,990,115.