LATIDIA · Ciberseguridad

ACE: un motor de mapeo de cumplimiento y detección de intrusiones orquestado por IA

arXiv: 2610.22702v1Tipo de anuncio: nuevo Resumen: Este estudio propone el Automated Compliance Engine (ACE), un marco orquestado por IA que vincula la detección de intrusiones, el mapeo de control regulatorio y la contramedida automatizada

La noticia

arXiv:2610.22702v1 Announce Type: new Abstract: This study proposes the Automated Compliance Engine (ACE), an AI-orchestrated framework that links intrusion detection, regulatory control mapping, and automated countermeasure deployment for security operations environments. ACE integrates Suricata IDS, a LangGraph five-stage workflow, retrieval-augmented generation, NIST SP 800-53 Rev. 5 control retrieval, large language model-based control ranking, and SSH-based Suricata rule deployment. The framework was evaluated in a two-virtual-machine laboratory using eight simulated attack scenarios and three legitimate traffic tests. ACE processed all eight attack alerts, achieved 100% alert detection, 0% false positives across legitimate traffic tests, generated deployable AUTO rules for 37.5% of alerts, verified 100% deployment of generated rules, and achieved an