NOMINATION HIGHLIGHTS

When addressing security incidents and vast amounts of threat intelligence, SOCs heavily rely on the expertise of security professionals for incident response. However, with the rise of artificial intelligence, the complexity of business operational data has increased, necessitating more comprehensive technical skills and knowledge from these professionals. Rapid and accurate responses to potential security threats are essential as any delays or misreporting can result in severe vulnerabilities. Moreover, the complexities of vulnerability management and stricter compliance requirements further exacerbate the operational pressure on SOCs. To tackle these challenges, CITIC Telecom CPC’s AI SOC utilizes cutting-edge AI capabilities to comprehensively boost SOC efficiency, delivering quicker, more precise 24/7 security analysis and monitoring for businesses.

SIEM-MiiND:
As the core of our AI SOC, SIEM-MiiND is a self-built intelligent security information and event management (SIEM) platform independently developed by our cybersecurity and innovation R&D team. It features more efficient data processing capabilities and comprehensive security monitoring:
• Enhanced Detection Capabilities: Conducts preliminary analysis of vulnerabilities and potential Indicators of Compromise (IOCs) proactively to reduce threats to enterprise networks.

• Optimized Rule Sets: Through AI technology, detection thresholds are adjusted based on the customer’s historical data and new attack scenarios, and new rule sets are automatically and continuously created for the log data of newly added devices, tailoring and fine-tuning rule sets for the customer.

• Improved Response Capabilities: Implements an intelligent security incident detection mechanism , significantly reducing troubleshooting time and enabling actionable recommendations up to 75% faster after the initial email alert — assisting customers on minimizing losses from business disruptions. SIEM-MiiND also identifies potential threats and issues preventive alerts, lowering the risk of enterprise network attacks.

• AI-Powered Chatbot: Provides businesses with an additional inquiry channel beyond the 24/7 hotline, enabling them to promptly and clearly understand the status of security incidents and overall security levels through both online and offline channels, under a secure authentication login mechanism.

• User-Friendly Security Dashboard: Offers a fully visualized interface that consolidates various security metrics and statistical reports, enabling enterprises to comprehensively monitor their latest cybersecurity status.