FIT3212 Security automation and artificial intelligence

This unit introduces the principles and practice of applying automation and artificial intelligence (AI) to cybersecurity operations. It explores how modern security teams use automation to improve efficiency, consistency, and scalability across the security lifecycle, and how AI and machine learning techniques can be applied to detect, analyse, and respond to threats. You will examine the role of automation in areas such as security monitoring, vulnerability management, incident response, and threat intelligence. The unit covers foundational concepts of scripting and orchestration (e.g., APIs, workflows, playbooks), as well as the integration of tools and systems within security operations. The unit also examines governance considerations for the use of automation and AI in security operations, including the role of human judgement and oversight in automated decision-making processes. You will also critically analyse the strengths and limitations of AI-driven security, including issues such as false positives, bias, and explainability, and evaluate potential failure modes that arise when automation and AI are integrated into security workflows.