Cybersecurity vulnerability detection with artificial intelligence models

A system, comprising:

• a memory;
• and
• a processing device, operatively coupled to the memory, to:
• generate, via a first artificial intelligence (AI) model, an agent action space based on security data, wherein the agent action space is indicative of actions to perform to potentially compromise at least one of a computing system, a network, or an application;
• perform a reinforcement learning process with an agent based on the agent action space to obtain a log of the reinforcement learning process, wherein performing the reinforcement learning process comprises determining a policy based on the agent action space and a reward function, wherein the log of the reinforcement learning process is based on the policy, and wherein the log includes parameters of the reinforcement learning process;
• and
• generate, via a second AI model, a report based on the security data and at least a portion of the log, wherein the report is indicative of a security weakness of the at least one of the computing system, or the network.

A non-transitory computer-readable medium, having instructions stored thereon which, when executed by a processing device, cause the processing device to:

• generate, via a first artificial intelligence (AI) model, an agent action space based on security data, wherein the agent action space is indicative of actions to perform to potentially compromise at least one of a computing system, a network, or an application;
• perform a reinforcement learning process with an agent based on the agent action space to obtain a log of the reinforcement learning process, wherein performing the reinforcement learning process comprises determining a policy based on the agent action space and a reward function, wherein the log of the reinforcement learning process is based on the policy, and wherein the log includes parameters of the reinforcement learning process;
• and
• generate, by the processing device and via a second AI model, a report based on the security data and at least a portion of the log, wherein the report is indicative of a security weakness of the at least one of the computing system, the network, or the application.