Augment Threat Models With AI-assistant Jeff - IriusRisk

KUALA LUMPUR, Oct 22 (Bernama) -- IriusRisk, the industry-leading platform for automated threat modelling, has launched ‘Jeff: AI Assistant’, a new artificial intelligence (AI)-powered tool that can help developers and architects generate threat models from images.

The new feature is the latest development in IriusRisk’s expansion into AI, a move which helped to deliver more than 50 per cent annual recurring revenue (ARR) growth last year, according to a statement.

‘Jeff’ is a world-first in that it is the only automated secure-by-design tool that fully leverages the latest advancements in AI to produce fully functioning threat models prompted by image or text description inputs and also differs from other large language models (LLMs) as it is able to focus on extracting the most useful information from that input to generate an outline for a specific threat model.

This new tool works by harnessing AI to analyse inputs, which can range from images to transcriptions of conversations discussing an idea for a new product, and create the first draft of a tailored threat model.

This represents a landmark moment for the cybersecurity industry in that it will make the threat modelling process significantly more accessible for architects and security teams, enabling model creation and implementation at a speed and scale not seen before.

With the AI-powered technology, it takes two to three minutes to process an input and generate a preliminary threat model, which is then complete with threats, weaknesses, and countermeasures.

In addition, ‘Jeff’ users can skip several steps in the threat modelling process, significantly reducing time and making it more streamlined by helping architects and security teams to create a refined threat model quicker. This can then be run through the IriusRisk platform to build it out further.

‘Jeff’ is currently available to paying customers as well as through its free Community Edition platform, and will be constantly improved and refined as it is integrated into all IriusRisk products over the coming years.

For context, the IriusRisk platform uses threat modelling to help organisations understand the security flaws and risks in software design, automatically generating potential threats and the countermeasures to address them before a line of code is written.

-- BERNAMA