9 citations · 15 across the 8 of their papers we have counts for
11 papers
Organizational Context for the Enterprise Security Brain
Eden Yavin, Ariel Zadok, Gal Engelberg +2
Agents that investigate and decide on enterprise security reason over a machine-readable view of the environment: its assets, identities, configurations, relations, and findings. T…
Contextualization of Third-Party Cloud Security Findings
Leon Goldberg, Gal Engelberg
Finding severity is the main driver of how security teams prioritize remediation. For third-party cloud security findings, that severity is static: the rule that raised the finding…
Coding Agents Aren't Enough! Evaluating an Enterprise Security Brain for Agentic Cloud Investigations
Leon Goldberg, Gal Engelberg, Eden Yavin +3
Cloud-security investigation is dominated by population tasks: which identities can read a data store, how many resources fail a control, what is reachable from another account. Th…
Open Security Benchmark: Towards Autonomous Enterprise Cyber Defense
Gal Engelberg, Michael Arenzon, Leon Goldberg
Enterprises are moving toward autonomous cyber defense: agentic AI that builds situational awareness of an organization's security state and reasons from it to assessments, decisio…
Cross-Vendor Sola ISPM Benchmark: Evaluating Agentic AI for Federated Identity Security Reasoning
Eden Yavin, Gal Engelberg, Konstantin Koutsyi +2
The rapid proliferation of multi-cloud and SaaS platforms has transformed Identity Security Posture Management (ISPM) into a fundamentally cross-vendor challenge: critical misconfi…
AI Native Asset Intelligence
Gal Engelberg, Leon Goldberg, Konstantin Koutsyi +3
Modern security environments generate fragmented signals across cloud resources, identities, configurations, and third-party security tools. Although AI-native security assistants…
Sola-Visibility-ISPM: Benchmarking Agentic AI for Identity Security Posture Management Visibility
Gal Engelberg, Konstantin Koutsyi, Leon Goldberg +5
Identity Security Posture Management (ISPM) is a core challenge for modern enterprises operating across cloud and SaaS environments. Answering basic ISPM visibility questions, such…
GenSIaC: Toward Security-Aware Infrastructure-as-Code Generation with Large Language Models
Yikun Li, Matteo Grella, Daniel Nahmias +5
In recent years, Infrastructure as Code (IaC) has emerged as a critical approach for managing and provisioning IT infrastructure through code and automation. IaC enables organizati…
An ontological lens on attack trees: Toward adequacy and interoperability
Ítalo Oliveira, Stefano M. Nicoletti, Gal Engelberg +3
Attack Trees (AT) are a popular formalism for security analysis. They are meant to display an attacker's goal decomposed into attack steps needed to achieve it and compute certain…
Prompted Contextual Vectors for Spear-Phishing Detection
Daniel Nahmias, Gal Engelberg, Dan Klein +1
Spear-phishing attacks present a significant security challenge, with large language models (LLMs) escalating the threat by generating convincing emails and facilitating target rec…
Towards an Ontology-Driven Approach for Process-Aware Risk Propagation
Gal Engelberg, Mattia Fumagalli, Adrian Kuboszek +3
The rapid development of cyber-physical systems creates an increasing demand for a general approach to risk, especially considering how physical and digital components affect the p…