Ep110: Redefining Network Detection & Response with Generative AI – The Partnership of ExtraHop Networks and AWS

Kanaiya Vasani, Chief Product Officer, explains how ExtraHop leverages AWS services and generative AI to help enterprise customers address the growing security challenges of uncontrolled AI adoption.

Topics Include:

• ExtraHop reinventing network detection and response category
• Platform addresses security, performance, compliance, forensic use cases
• Behavioral analysis identifies potential security threats in infrastructure
• Network observability and attack surface discovery capabilities included
• Application and network performance assurance built-in features
• Traditional IDS capability with rules and IOCs detection
• Packet forensics for investigating threats and wire evidence
• Cloud-native implementations and compromised credential investigation support
• ExtraHop partnership with AWS spans 35-40 different services
• AWS handles infrastructure while ExtraHop focuses core competencies
• ExtraHop early adopter of generative AI in NDR
• Natural language interface enables rapid data access queries
• English questions replace complex query languages for users
• Agentic AI experiments focus on SOC automation workflows
• L1 and L2 analyst workflow automation improves productivity
• Shadow AI creates major risk concern for customers
• Uncontrolled chatbot usage risks accidental data leakage
• Governance structures needed around enterprise gen AI usage
• Visibility required into LLM usage across infrastructure endpoints
• AI innovation pace challenges security industry keeping up
• Models evolved from billion to trillion parameters rapidly
• Traditional security tools focus policies, miss real-time activity
• "Wire doesn't lie" - network traffic reveals actual behavior
• ExtraHop maps baseline behavior patterns across infrastructure endpoints
• Anomalous behavioral patterns flagged through network traffic analysis
• MCP servers enable LLM access through standardized protocols
• Stolen tokens allow adversaries unauthorized MCP server access
• Machine learning identifies anomalous traffic patterns L2-L7 protocols
• Gen AI automates incident triage, investigation, response workflows
• Best practices include clear policies, governance, monitoring, education

Participants:

• Kanaiya Vasani – Chief Product Officer, ExtraHop Networks

See how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/