Please tell us what kind of AI capability you would want to see.
Help with configurations?
Help with management?
Help with general IT?
?
thanks
4 Likes
Hi Melih,
Behavioral analysis
Cloud integration
Thanks
Edit Zorkas:
My personal wish for CIS 2026 is this:
Behavioral Analysis and Cyberattack Anticipation
Machine learning-based behavioral analysis allows us to model the normal habits of users, machines, and business processes. Any deviation from these models can signal suspicious activity, whether it’s unauthorized access, malicious behavior, or malware in the reconnaissance phase.
This predictive approach strengthens security posture by anticipating attacks rather than reacting to them. It also enables the detection of sophisticated, low-signal attacks, such as those carried out by Advanced Persistent Threat (APT) groups.
By combining AI with behavioral analysis, users have a powerful tool to monitor their systems intelligently, dynamically, and contextually.
Thank you
3 Likes
Only add features you/the user can also disable.
Just because it says AI on the label doesn’t mean it will be any good, a benefit or always correct.
2 Likes
@Carlo1
AI-based threat detection using behavioral analytics to identify suspicious anomalies and attack patterns.
CIS, as of now, does not explicitly feature behavioral analytics; it’s simply a module added to the program.
1 Like
For as long as it’s detection/protection related. Just stuffing “Ai” into things just to say you have “Ai” in things is the dumbest thing everyone is doing at the moment.
If you can include machine learning to speed up file analysis to further improve cloud detection and file rating and improve behavior detection then I’m all for it.
1 Like
how about AI capabilities other than simply detection etc? (We already use it for detection in the cloud).
3 Likes
Machine Learning vs. AI
Like a hammer in a toolbox, machine learning (ML) is a specific tool within the broader framework of artificial intelligence (AI). ML is a technique that focuses on developing algorithms and models to learn and adapt to tasks and data. Artificial intelligence encompasses a wide range of techniques and aims to create intelligent machines capable of human-like intelligence.
As your organization’s data grows in both complexity and size, artificial intelligence and machine learning become crucial for enabling you to perform complex tasks such as decision-making, data analysis, and streamlining operations.
1 Like
Use of Ai decision making for Containment system to avoid containing clean and trusted apps. But I don’t think there is any reliable way to do it using any kind of Ai to be honest. I don’t think I’d be able to trust its decision making.
1 Like
Given the now highly advanced skills of cybercriminals, I have concerns that AI, regardless of the type, will remain unaffected or resistant to manipulation by such individuals. Another possibility arises: the creation of seemingly trustworthy backdoors. AI is fine, but only if the user explicitly allows it. I don’t have unquestioned trust in AI, especially when it comes to security. I find it particularly dangerous if it is integrated into security programs or consulted on security matters. In that case, I’d prefer to call upon an AI separately and ask it questions.
Personally would be great if it is limited to on-device only for the standard AV, Firewall and HIPS. Similarly definitely allow it to run locally alongside containment.
Referring to how Firefox and Microsoft got push-back on integration of AI provide adequate toggle to allow the end user control on
- Which component it is enabled
- Which datasets it can use
- Which datasets it can send back to Comodo/Xcitium (aka Virusscope and File Rating)
- Kindly ensure appropriate conditional logic is present so that systems without an NPU use a lower end LLM or none of the AI (Similar to the HIPS Settings > Enable adaptive mode under low system resources)
@prodex Melih stopped by in the mod board a week ago and I asked him the following question which I think voices your concerns:
This is Melih’s answer:
I’d say Comodo is aware of and on it.
2 Likes
Javascript malware detector via machine learning would be good I don’t see any other machine learning so I generated in github. HydraDragonAntivirus/hydradragon/machine_learning/train_javascript.py at development-version · HydraDragonAntivirus/HydraDragonAntivirus · GitHub
I used python due to good support but I was planning to avoid python much as possible but in machine learning python is good.