Noon: LLMs can replace traditional security log parsing and aggregation pipelines
Ryan Noon · No Priors Ep. 38 | With Material Security Co-Founder Ryan Noon · Oct 26, 2023 · at 24:00
Ryan Noon discusses the disruptive potential of large language models across legacy cybersecurity data workflows with host Elad Gil.
“So much of security is is, is emitting Logs and alerts and then parsing those logs alerts again and aggregating them. You know, I spent a lot of time doing, you know, data infrastructure and analytics in my life, you know, before, after my cybersecurity grad degree, but before I started using that degree and it's just like, you know, serializing and deserializing data and parsing some old firewall thing from 20 years ago or whatever, and like an LLM can just eat that, you know, like depending on volume and all that stuff”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →