LATIDIA · Ciberseguridad

Validación de las amenazas en la nube descubiertas por la IA en la infraestructura en vivo: un estudio de múltiples modelos y múltiples nubes

arXiv: 2611.10947v1Announce Type: new Resumen: El modelado de amenazas de infraestructura en la nube carece de validación empírica de las amenazas descubiertas por la IA. Presentamos una metodología de tres fases de descubrimiento de amenazas multiagente, automatizado ex

La noticia

arXiv:2611.10947v1 Announce Type: new Abstract: Cloud infrastructure threat modeling lacks empirical validation of AI-discovered threats. We present a three-phase methodology of multi-agent threat discovery, automated exploit synthesis, and non-destructive live validation, and apply it to three commercial foundation models on two cloud architectures, validating each threat natively on the cloud (AWS, GCP, or Azure) it was discovered against. Of 233 AI-discovered threats, 103 were confirmed and 34 refuted (75.2\% precision, 95\% CI [67.3, 81.7]); 44 were conditional (the named mechanism refuted but an equivalent impact shown through another path) and 52 indeterminate. Multi-model discovery helped through breadth, not agreement: the three models together found 2.2$\times$ the confirmed threats of the