RAG Against the Machine - Using Retrieval-Augmented Generation and MCP to Fortify Cybersecurity Defense

Explore how Retrieval-Augmented Generation (RAG) and Model Context Protocol (MCP) can strengthen cybersecurity defenses in this 51-minute conference talk from BSidesLV. Learn about CADDIE, a RAG engine powered by MCP that demonstrates how to inject real-time policy data, threat intelligence, and log information directly into Large Language Models. Discover practical applications for automating gap analysis, alert triage, and regulatory mapping processes that are essential for Security Operations Centers (SOCs), auditors, compliance teams, and AI practitioners. Gain insights into leveraging advanced AI techniques to enhance cybersecurity workflows and improve defensive capabilities through intelligent data retrieval and contextual analysis.