Method and system for simulating a cyberattack using an AI agent

A non-transitory computer-readable medium storing a set of instructions for simulating cyberattacks using AI agents, the set of instructions comprising:

• one or more instructions that, when executed by one or more processors of a device, cause the device to:
• parse, by at least one AI agent, contents of at least one incident report of at least one cyberattack, wherein the contents of the at least one incident report include at least a known attack technique, a known attack tactic, and a known attack procedure;
• extract, by the at least one AI agent according to a reasoning logic stored in a reasoning layer of the at least one AI agent, information from the at least one incident report;
• assign a cyberattack simulation task for the at least one AI agent, wherein the cyberattack simulation task includes at least an instruction for the at least one AI agent to simulate the cyberattack;
• and
• execute, by the at least one AI agent, at least one operation on a sandboxed computing environment, wherein the reasoning layer of the at least one AI agent is configured to determine, based on the extracted information and according to the reasoning logic, the at least one operation to be executed to achieve the cyberattack simulation task.

A system for simulating cyberattacks using AI agents comprising:

• a processing circuitry;
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• parse, by at least one AI agent, contents of at least one incident report of at least one cyberattack, wherein the contents of the at least one incident report include at least a known attack technique, a known attack tactic, and a known attack procedure;
• extract, by the at least one AI agent according to a reasoning logic stored in a reasoning layer of the at least one AI agent, information from the at least one incident report;
• assign a cyberattack simulation task for the at least one AI agent, wherein the cyberattack simulation task includes at least an instruction for the at least one AI agent to simulate the cyberattack;
• and
• execute, by the at least one AI agent, at least one operation on a sandboxed computing environment, wherein the reasoning layer of the at least one AI agent is configured to determine, based on the extracted information and according to the reasoning logic, the at least one operation to be executed to achieve the cyberattack simulation task.