Growing technological progress has led to an accelerated digital transformation of organisations, which makes digital information systems dynamic, more complex and increasingly exposed. Organisations depend on a growing number of technologies with countless interconnections and which are constantly being updated, often resulting in a complete lack of knowledge of digital infrastructure and assets (e.g. components such as applications, databases, servers, devices, accounts or anything else that could be exploited). On the other hand, the current offerings in the cybersecurity market are mostly defensive and reactive options, more geared towards current regulatory compliance and incident management than prevention. Since the root of cybercrime is the exploitation of vulnerabilities, their rapid identification and mitigation is the key to preventing them.
The main objective of this project is to further research and develop the Ethiack Portal, a platform that will combine automatic and manual ethical hacking with Artificial Intelligence to enable the continuous and precise identification of vulnerabilities with a high level of automation and autonomy in different types of digital assets and infrastructures.
Specific expected objectives:
- Complete recognition, mapping and intelligent management of digital assets;
- Accurate, efficient and rapid analysis of the most impactful vulnerabilities through optimised automatic ethical hacking;
- Autonomous generation of automatic ethical hacking modules supported by NLP and LLMs;
- Robust AI used to generate ethical hacking modules.