Palo Alto Networks Strengthens Device Security with Amazon Bedrock

The Device Security team at Palo Alto Networks wanted to detect potential problems in production early, giving experts more time to respond. To do this, it worked with the AWS Generative AI Innovation Center (GenAIIC) and built an automated log classification pipeline on top of Amazon Bedrock.

In cybersecurity, data volumes are growing exponentially, and manual log analysis is becoming less and less efficient and ever more labor-intensive. As a cybersecurity leader, Palo Alto Networks recognizes the need for new approaches to data analysis to keep its devices secure. That is why it turned to generative AI and Amazon Bedrock.

Amazon Bedrock, an AWS platform, provides access to a range of generative AI models, including Anthropic's Claude Haiku and Amazon Titan Text Embeddings. Claude Haiku classifies logs based on their content, while Amazon Titan Text Embeddings converts text into vector representations, which makes it possible to compare and match logs efficiently. Used together, the models let Palo Alto Networks build a pipeline that analyzes logs automatically, detects anomalies and classifies them by severity.

The automated pipeline lets the Palo Alto Networks Device Security team spot critical problems at an early stage, which significantly shortens response times and minimizes potential damage. Automation also reduces the load on experts, allowing them to focus on more complex tasks that require human intelligence and experience.

Using Amazon Bedrock to analyze security logs has far-reaching implications for the cybersecurity industry. It shows how generative AI can be used to automate routine tasks, improve efficiency and strengthen overall security. Other companies could follow Palo Alto Networks' example and use Amazon Bedrock or similar platforms to automate data analysis and identify potential threats.

In short, the collaboration between Palo Alto Networks and the AWS Generative AI Innovation Center shows how new technology can be applied to hard problems in cybersecurity. The automated log classification pipeline built on Amazon Bedrock lets Palo Alto Networks protect its devices more effectively and offer customers more secure solutions. The experience could be a valuable lesson for other companies looking to raise their level of cybersecurity.