AI Security Partners with Splunk to Launch Operations Automation Solutions Utilizing Next-Gen Security SIEM "Splunk Enterprise Security"

AI Security Inc. (Headquarters: Shinjuku-ku, Tokyo; Representative Director and CEO: Takao Horii; hereinafter "AI Security"), which possesses expertise in AI security (AI governance / AI assurance / AI protection) expanding against the backdrop of the widespread adoption of generative AI, and provides end-to-end support from zero-trust strategy formulation to operations, has been certified under the partner program of Splunk, a Cisco company. With this certification, we officially launch the integration and construction of log analysis platforms utilizing the next-generation security operations platform "Splunk Enterprise Security," as well as operations automation support through SOAR.

Background: Sophisticated Cyberattacks and the "Limits of SOC"

With the promotion of digital transformation (DX) and the establishment of hybrid work, IT environments have become extremely complex. Currently, many companies face the challenge of being unable to manage the enormous amount of logs generated by disjointed tools, thereby missing the "signs" of cyberattacks or internal misconduct.

Furthermore, against the backdrop of expanding threat actors due to technological innovations in Frontier AI models, and the rapid spread of generative AI in business operations, preparing for new risks such as the abuse of AI itself and information leakage has become an urgent task.

In particular, the following three points act as major barriers to security operations: - Siloed logs: Data is scattered across different systems, making it difficult to grasp the overall picture. - Delayed detection: Against sophisticated attacks, traditional perimeter defense cannot provide real-time responses. - Increased operational load: There are too many alerts to handle, and even if they are visualized, they cannot be linked to "actions (SOAR)."

AI Security integrates its accumulated expertise in AI security and zero-trust strategy implementation with Splunk's advanced analytical capabilities and AI technology. By not only aggregating logs but also utilizing machine learning and generative AI for anomaly detection and automating incident response from end to end, we fundamentally elevate the security resilience of enterprises.

Key Solutions Provided

Through this partner agreement, we will deliver the following advanced security support:

- Design and Construction of Next-Generation SIEM Platforms: Using "Splunk Enterprise Security," we build a platform to integrate and correlate logs from all environments, from on-premises to multi-cloud. - Operations Automation through SOAR (Orchestration & Automation): Automating the initial response when an incident occurs. This minimizes manual judgment and dramatically shortens response times from minutes to seconds. - Behavior Analysis Using AI and Machine Learning: Identifying not only known threats but also signs of unknown attacks and internal misconduct based on user behavior (UEBA). - On-Site SOC Enhancement and Talent Support: Moving beyond tool implementation, we standardize operations tailored to the customer's organizational structure and provide hands-on support by specialized personnel. - Implementation and Adoption Support for Splunk AI Solutions: Supporting the introduction and utilization of various assistants leveraging generative AI, such as "Splunk AI Assistant for SPL," "Splunk AI Assistant in Security," and "AI Assistant in Splunk Observability Cloud." This enables the generation of SPL queries using natural language and accelerates security investigations and operations, allowing even non-specialists to perform advanced analysis and responses.

Comment from Takao Horii, Representative Director and CEO of AI Security Inc.

"We are convinced that this partner agreement with Splunk will be a major turning point, shifting Japanese companies' security operations from 'defensive' to 'offensive.' By combining Splunk's overwhelming data processing capabilities with our expertise in both zero-trust and AI security domains, we will protect our customers' businesses from both complex threats and the new risks of the generative AI era, delivering true digital resilience."

AI Security Inc. Company Profile - Location: Miyake Bldg. 4F, 1-9-16 Yotsuya, Shinjuku-ku, Tokyo 160-0004 - Representative: Representative Director and CEO Takao Horii - Business Description: AI governance consulting, AI assurance services, AI protection services, etc.