f10w

>When we started the log analysis, we first used frontier models behind commercial APIs. This did not work: the analysis requires submitting large volumes of real attack commands, exploit payloads, and C2 artifacts, and these requests were blocked by the providers' safety guardrails, which cannot distinguish an incident responder from an attacker. We ran the forensic analysis instead on GLM 5.2, an open-weight model, on our own infrastructure. This had a second benefit: no attacker data, and none of the credentials it referenced, left our environment.

连安全防护都过不了，这不是说明不能通过商业模型进行攻击吗？
博客又说这是 AI-driven intrusion ，攻击者不就大概率来自开源模型？

MTE1Mzc4MTI0MkBxcS5jb20= 谢谢老板