Скачать или смотреть Google's Michael Sinno on Autonomous Detection at 7 Trillion Logs Per Day

Google's security team is shifting from detection and response to infer and interrupt, automatically containing threats before they escalate. Michael Sinno, Director of Detection & Response, explains how fine-tuned models, golden datasets, and humans-in-the-loop validation enable his team to process 7 trillion log lines daily while maintaining their no-fail mission at massive scale.

Chapters:
0:00 Introduction
1:01 Evolution of innovation and scale at Google
2:30 Early AI experiments and human training machine roadmap
2:54 Starting with incident summaries and basic use cases
3:52 Handling a million tickets per year with automation
4:55 AI-assisted vs AI-led vs autonomous operations
5:36 Processing 7 trillion log lines daily
6:07 Conservative approach to AI with golden datasets
7:22 Automating vulnerability coordination workflows
8:21 Building modular agents as detection components
9:49 Fine-tuned models vs prompting on Gemini
10:32 Quality assurance with overseer agents
11:58 Non-deterministic AI challenges
13:41 Focusing humans on novel and complex threats
14:22 AI agents autonomously writing detections
15:26 70% automation goal and critical evaluation
15:49 Distinguishing AI from traditional automation
16:39 Judgment vs if-then logic in automation decisions
17:19 AI struggles with unknown unknowns
20:11 Multi-step investigations and deeper forensics
21:15 Integrating Sec-Gemini with Timesketch
22:14 Progress from experimentation to production
23:15 Well-cataloged infrastructure enabling AI success
23:32 Mindset shifts in detection engineering with AI
24:21 Moving toward infer and interrupt models
25:20 Balancing broad and specific detection approaches
28:04 Rethinking architecture for efficiency
29:15 Speed as the critical factor for modern detection
29:53 Measuring success with new metrics
33:13 Biggest learnings from implementing AI
34:42 The Timesketch forensics challenge
35:01 Three pieces of advice for security leaders