Uploaded August 2026 | Updated September 2026, 1 week ago
Many SOC analysts lack OT protocol and security knowledge. This can make alerts and followon analysis difficult. Can AI step in and solve some of this challenge?
Rashi presented her teams efforts to use LLMs to analyze alerts and provide summaries of protocols and events.
A key innovation in the approach is the customized adaptation of Retrieval-Augmented Generation (RAG) technology for packet analysis. While RAG is originally designed for question-answering systems, Rashi's team has modified it to extract the appropriate chunks of information from the relevant protocol specifications using raw packet data, enabling the generation of high-quality packet summaries for ICS protocols such as BACnet/IP and DNP3. This protocol-agnostic approach enables the system to handle diverse industrial communication standards without requiring extensive fine-tuning or proprietary models.
Subscribe to Dale’s ICS Security: Friday News & Notes email here:
friday.dale-peterson.com/signup
Check out S4x27. Feb 8 - 11 in Tampa:
s4xevents.com
Many SOC analysts lack OT protocol and security knowledge. This can make alerts and followon analysis difficult. Can AI step in and solve some of this challenge?
Rashi presented her teams efforts to use LLMs to analyze alerts and provide summaries of protocols and events.
A key innovation in the approach is the customized adaptation of Retrieval-Augmented Generation (RAG) technology for packet analysis. While RAG is originally designed for question-answering systems, Rashi's team has modified it to extract the appropriate chunks of information from the relevant protocol specifications using raw packet data, enabling the generation of high-quality packet summaries for ICS protocols such as BACnet/IP and DNP3. This protocol-agnostic approach enables the system to handle diverse industrial communication standards without requiring extensive fine-tuning or proprietary models.
Subscribe to Dale’s ICS Security: Friday News & Notes email here:
friday.dale-peterson.com/signup
Check out S4x27. Feb 8 - 11 in Tampa:
s4xevents.com
