Workshop : Cybersécurité à l’ère de l’AIOps

Xavier Bensemhoun, Check Point's sales engineer and evangelist for eastern Canada, runs an interactive workshop, with live Mentimeter polls, on AIOps: applying artificial intelligence to everyday security operations. He grounds it in Gartner's 2017 coining of the term and a six-year follow-up study of roughly 900 organisations, presenting Gartner's five-step maturity pyramid (ingest data, correlate it into events, turn events into a story, predict what comes next, then automate remediation) and warning that AIOps is not a cure-all and needs open, API-connected tools plus a centralised cloud platform. He then tours Check Point's own AIOps stack: Infinity Events for ingestion and correlation; Infinity AI Copilot, a conversational assistant that already answers questions about a customer's own environment and, in development, could draft tickets such as adding a user to an Active Directory group; Infinity PlayBlocks for automated SOC playbooks; the XDR/MDR triage engine, which filtered two trillion events down to 600,000 critical incidents in three months; ThreatCloud AI's 90-plus inspection engines; and CloudGuard WAF's anomaly-based defence, illustrated with the Log4Shell incident. Audience questions cover data governance, log retention and bilingual support.