Search papers, labs, and topics across Lattice.
This paper introduces a novel approach to DevSecOps by integrating Security Chaos Engineering (SCE) with Large Language Models (LLMs) to automate the generation of attack defense trees. The LLM predicts adversary behavior, which is then used to construct SCE experiments, proactively identifying vulnerabilities and potential defenses. The authors demonstrate the feasibility of this approach by creating a reproducible experiment, showcasing how LLMs can enhance proactive cyber defense strategies.
LLMs can now automatically generate attack defense trees for Security Chaos Engineering, enabling proactive identification of previously unconsidered defenses in DevSecOps environments.
The most valuable asset of any cloud-based organization is data, which is increasingly exposed to sophisticated cyberattacks. Until recently, the implementation of security measures in DevOps environments was often considered optional by many government entities and critical national services operating in the cloud. This includes systems managing sensitive information, such as electoral processes or military operations, which have historically been valuable targets for cybercriminals. Resistance to security implementation is often driven by concerns over losing agility in software development, increasing the risk of accumulated vulnerabilities. Nowadays, patching software is no longer enough; adopting a proactive cyber defense strategy, supported by Artificial Intelligence (AI), is crucial to anticipating and mitigating threats. Thus, this work proposes integrating the Security Chaos Engineering (SCE) methodology with a new LLM-based flow to automate the creation of attack defense trees that represent adversary behavior and facilitate the construction of SCE experiments based on these graphical models, enabling teams to stay one step ahead of attackers and implement previously unconsidered defenses. Further detailed information about the experiment performed, along with the steps to replicate it, can be found in the following repository: https://github.com/mariomc14/devsecops-adversary-llm.git.
