AI Powered OSINT - Taranis AI
Taranis AI is an open-source OSINT platform built around the workflows of Cyber Threat Intelligence (CTI) analysts. It uses AI to support information gathering and situational analysis, while keeping the analyst at the centre of the process.
Threat intelligence becomes much more useful when it can be shared. Taranis AI can not only share intelligence products, but also connect independent instances and exchange intelligence through MISP, allowing different organisations to collaborate while still maintaining their own environments and data.
This comes with some interesting challenges. How do we integrate AI and Large Language Models while preserving human judgement and accountability? How do we share information between independent systems while keeping control over the data? And how much control should we hand over to AI in the first place? In this talk, we will share our experience developing Taranis AI, the decisions we have made so far, what currently works, and some of the problems we are still working on.
Taranis AI is currently being developed by the Austrian Institute of Technology in the Cyber Security research group.
Funding of this talk:
Funded by the European Union under the Horizon Europe Research and Innovation programme (GA no. 101168144 - MIRANDA). Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or the European Commission. Neither the European Union nor the granting authority can be held responsible for them.
Peter Leitmann is a Research Engineer at AIT in the Cyber Security research group and has been part of the team for several years. With a formal background in Cyber Security, he is a core developer of the OSINT platform Taranis AI, contributing across the software development lifecycle while designing and improving CTI analyst processes and workflows, as well as enabling cross-platform collaboration.