AI-BASED AGENT FOR MITIGATION OF DISTRIBUTED DENIAL-OF-SERVICE (DDoS) ATTACKS USING ARTIFICIAL INTELLIGENCE MODELS

A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:

• one or more instructions that, when executed by one or more processors of a device, cause the device to:
• A method for analyzing and determining a mitigation action for a distributed denial of service (DDoS) attack, comprising:
• receive, by an agent, an input request from a security tool, wherein the input request includes traffic patterns indicative of an ongoing DDoS attack
• generate, by the agent, a prompt for a generative AI model based on at least the input request, wherein the prompt, when processed by the generative AI model, returns a recommended mitigation action to mitigate the DDoS attack, wherein the mitigation action includes at least instructions to modify at least one security policy set with the security tool;
• and
• feed, by the agent, the at least instructions to the security tool, wherein the at least instructions, when executed by the security tool, cause the security tool to modify at least one security policy in real-time to mitigate the DDoS attack.

A system for analyzing and determining a mitigation action for a distributed denial of service (DDoS) attack comprising:

• one or more processors configured to:
• receive, by an agent, an input request from a security tool, wherein the input request includes traffic patterns indicative of an ongoing DDoS attack
• generate, by the agent, a prompt for a generative AI model based on at least the input request, wherein the prompt, when processed by the generative AI model, returns a recommended mitigation action to mitigate the DDoS attack, wherein the mitigation action includes at least instructions to modify at least one security policy set with the security tool;
• and
• feed, by the agent, the at least instructions to the security tool, wherein the at least instructions, when executed by the security tool, cause the security tool to modify at least one security policy in real-time to mitigate the DDoS attack.