Huge Diamond  Network Service

ANMAS, AI Network Malicious PCAP Analysis System

• ANMAS, AI ​Network ​Malicious PCAP Analysis System, performs deep AI analysis of network packet files to detect whether internal network activity conceals APT attacks and malware activities, including: MITRE T0843, T1048, T1071, T1078, T1102, T1132, T1571, T1572, T1595, and other potential anomalous network threat activities witch is unpredictable and unknown potential network threats (abnormal network activity).

• Base on Small Language Model (SLM) throughs fine-tuning data and enhanced retrieval (RAG), the AI ​​Malicious Packets Analysis System (ANMAS) examines internal network activity for potential hidden malware and abnormal network activity.

• This system performs deep AI-based packet analysis using a local language model and RAG data. Compared to rule-based network packet analysis, this system fine-tunes the AI ​​data using SLM (Small Language Model) and employs enhanced RAG retrieval technology to train the AI's intelligent recognition and learning by combining packet data from over 2000 types of malicious program activities with normal network activity packet data. Through parameter fine-tuning, the AI ​​model (which can be set by the user) interfaces with the fine-tuned packet training data and RAG data to generate potential malicious program network activity identification alerts and cybersecurity reports.

• ANMAS elevates traditional network packet analysis from network information statistics reports to potential network threat pattern reports, and advances from rule-based network detection mechanisms (IDS, IPS) to dedicated AI small language model mechanisms, thereby improving and optimizing packet analysis capabilities for potential network activity threats.