Synthetic cyberattack tool that uses a generative artificial intelligence component

A method to protect against cyber threats, comprising:

• providing a synthetic cyberattack tool to use a generative artificial intelligence component to assist in generating a synthetic cyberattack to produce one or more cybersecurity incidents and/or events, and then to provide an analysis and an explanation for a purpose of providing cyber security training to at least one of i) an end user of a network and ii) a cyber security team member for the network,
• providing the synthetic cyberattack tool to cooperate with at least one of a cyberattack simulator and a cloud based war gaming virtual machine platform to perform synthetic cyberattacks in a mimic network, where the mimic network consists of a network of at least one of 1) an information technology network, 2) a cloud network, and 3) an email network, corresponding to a portion of an architecture and policies implemented in a real world network that the end user and/or the cyber security team member interacts with, where the mimic network of an organization is implemented in at least one of i) an environment of the cyberattack simulator and ii) as virtual machines in a cloud environment of the cloud based war gaming virtual machine platform,
• providing the synthetic cyberattack tool to orchestrate the synthetic cyberattack in a wargaming cyberattack exercise in the mimic network utilizing the generative artificial intelligence component, where the synthetic cyberattack tool is configured to derive I) the synthetic cyberattack from real world cyberattacks and II) the wargaming cyberattack exercise from real world behaviors of the end user and/or the cyber security team member as well as the architecture and policies implemented in the real world network that the end user and/or the cyber security team member interact with, and
• providing a user interface component for the synthetic cyberattack tool to display both results of testing in the wargaming cyberattack exercise along with an explainability on an understanding by the machine learning of the synthetic cyberattack.

A non-transitory storage medium including software that, upon execution by a processor, is configured to perform operations comprising:

• using a synthetic cyberattack tool that cooperates with a generative artificial intelligence component to assist in generating a synthetic cyberattack to produce one or more cybersecurity incidents and/or events, and then provides an analysis and an explanation for a purpose of providing cyber security training to at least one of i) an end user of a network and ii) a cyber security team member for the network,
• using the synthetic cyberattack tool that also cooperates with at least one of a cyberattack simulator and a cloud based war gaming virtual machine platform to perform synthetic cyberattacks in a mimic network, where the mimic network consists of a network of at least one of 1) an information technology network, 2) a cloud network, and 3) an email network, corresponding to a portion of an architecture and policies implemented in a real world network that the end user and/or the cyber security team member interacts with, where the mimic network of an organization is implemented in at least one of i) an environment of the cyberattack simulator and ii) as virtual machines in a cloud environment of the cloud based war gaming virtual machine platform,
• using the synthetic cyberattack tool to orchestrate the synthetic cyberattack in a wargaming cyberattack exercise in the mimic network utilizing the generative artificial intelligence component,
• using the synthetic cyberattack tool to derive I) the synthetic cyberattack from real world cyberattacks and II) the wargaming cyberattack exercise from real world behaviors of the end user and/or the cyber security team member as well as the architecture and policies implemented in the real world network that the end user and/or the cyber security team member interact with, and
• using a user interface component for the synthetic cyberattack tool to display both results of testing in the wargaming cyberattack exercise along with an explainability on an understanding by the machine learning of the synthetic cyberattack.