Generating mitigating responses to security deficiencies using generative machine learning models

1 . A method comprising:

receiving, by a processor, an identifier associated with a security deficiency, wherein the security deficiency is associated with a computer system;

determining, by the processor and based on the identifier, text data associated with the identifier;

determining, by the processor, a text prompt, wherein the text prompt comprises an instruction segment and the text data, and wherein the instruction segment comprises first text data identifying a mitigating response detection task and second text data identifying an output constraint, and wherein the output constraint represents a requirement about a structure of output data generated by a generative machine learning model;

providing, by the processor, the text prompt to the generative machine learning model;

receiving, by the processor and from the generative machine learning model, a set of outputs including a first output identifying a first mitigating response and a second output identifying a second mitigating response;

validating, by the processor, the first output based on determining that the first output satisfies the output constraint;

determining, by the processor, that the second output is invalid based on determining that the second output fails to satisfy the output constraint;

determining, by the processor, and based on validating the first output and determining that the second output is invalid, a final output representing the first mitigating response; and

providing, by the processor, the final output using an output interface.

2 . The method of claim 1 , wherein the mitigating response detection task comprises identifying a compensating control.

3 . The method of claim 2 , wherein the compensating control is associated with installation of at least one of a monitoring software, a firewall software, or an intrusion detection software on the computer system.

4 . The method of claim 2 , wherein the compensating control is associated with restricting access to the computer system.

5 . The method of claim 1 , wherein:

the instruction segment identifies a set of mitigating responses including the first mitigating response and the second mitigating response; and

the output constraint is associated with inclusion of a mitigating response from the set of mitigating responses.

6 . The method of claim 1 , wherein the output constraint is associated with using a text structure.

7 . The method of claim 1 , wherein determining the text data comprises:

querying an advisory database based on the identifier.

8 . The method of claim 1 , wherein the text prompt comprises the text data, and wherein the method comprises:

receiving second text data;

determining a second text prompt based on the second text data;

providing the second text prompt to the generative machine learning model;

receiving a second set of outputs including a third output from the generative machine learning model;

determining that the third output satisfies at least one of the output constraint or a second output constraint identified by the second text prompt; and

determining the final output based on the first output and the third output.

9 . The method of claim 8 , wherein determining the final output comprises:

determining a third text prompt that comprises third text data identifying the first output and fourth text data identifying the third output;

providing the third text prompt to the generative machine learning model;

receiving, from the generative machine learning model, a fourth output; and

determining the final output based on the fourth output.

10 . The method of claim 9 , wherein the third text prompt comprises an instruction to combine:

the first output and the second output.

11 . The method of claim 1 , wherein a similarity associated with the first mitigating response and the second mitigating response exceeds zero.

12 . The method of claim 1 , wherein the set of outputs comprise a third output identifying a third mitigating response, and the method further comprises:

validating, by the processor, the third output based on determining that the third output satisfies the output constraint;

determining, using a second machine learning model, a similarity score associated with the first output and the third output;

determining a voting score associated with the first output based on the similarity score; and

determining the final output based on the voting score.

13 . A system comprising:

one or more processors; and

one or more computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:

receiving an identifier associated with a security deficiency, wherein the security deficiency is associated with a computer system;

determining, based on the identifier, text data associated with the identifier;

determining a text prompt, wherein the text prompt comprises an instruction segment and the text data, and wherein the instruction segment comprises first text data identifying a mitigating response detection task and second text data identifying an output constraint, and wherein the output constraint represents a requirement about a structure of output data generated by a generative machine learning model;

providing the text prompt to the generative machine learning model;

receiving, from the generative machine learning model, a set of outputs including a first output identifying a first mitigating response and a second output identifying a second mitigating response;

validating the first output based on determining that the first output satisfies the output constraint;

determining that the second output is invalid based on determining that the second output fails to satisfy the output constraint;

determining, based on validating the first output and determining that the second output is invalid, a final output representing the first mitigating response; and

providing the final output using an output interface.

14 . The system of claim 13 , wherein the mitigating response detection task comprises identifying a compensating control.

15 . The system of claim 14 , wherein the compensating control is associated with installation of at least one of a monitoring software, a firewall software, or an intrusion detection software on the computer system.

16 . The system of claim 14 , wherein the compensating control is associated with restricting access to the computer system.

17 . The system of claim 13 , wherein:

the instruction segment identifies a set of mitigating responses including the first mitigating response and the second mitigating response; and

the output constraint is associated with inclusion of a mitigating response from the set of mitigating responses.

18 . One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

receiving an identifier associated with a security deficiency, wherein the security deficiency is associated with a computer system;

determining, based on the identifier, text data associated with the identifier;

determining a text prompt, wherein the text prompt comprises an instruction segment and the text data, and wherein the instruction segment comprises first text data identifying a mitigating response detection task and second text data identifying an output constraint, and wherein the output constraint represents a requirement about a structure of output data generated by a generative machine learning model;

providing the text prompt to the generative machine learning model;

receiving, from the generative machine learning model, a set of outputs including a first output identifying a first mitigating response and a second output identifying a second mitigating response;

validating the first output based on determining that the first output satisfies the output constraint;

determining that the second output is invalid based on determining that the second output fails to satisfy the output constraint;

determining, based on validating the first output and determining the second output is invalid, a final output representing the first mitigating response; and

providing the final output using an output interface.

19 . The one or more non-transitory computer-readable media of claim 18 , wherein the mitigating response detection task comprises identifying a compensating control.

20 . The one or more non-transitory computer-readable media of claim 19 , wherein the compensating control is associated with installation of at least one of a monitoring software, a firewall software, or an intrusion detection software on the computer system.