📱 Mobile Security Tips
Mike Torres — Android Security Engineer
Why AI Changes the Game for Cybersecurity
Adopting AI tools like ChatGPT, Claude, Gemini, and Copilot significantly enhances cybersecurity operations by automating repetitive tasks, generating incident reports, and providing insightful threat intelligence. As cybersecurity professionals, leveraging these tools can optimize workflows and enhance analytical capabilities.
Before You Start: How to Set Context Properly
Setting context is crucial for productive interaction with AI tools. Provide clear expectations, specify the desired tone, and outline the action needed. This will shape the AI’s response better than broad, vague questions.
Core Prompts Cheatsheet
What it does: Generates a comprehensive report.
When to use: After handling an incident to document procedures and lessons learned.
How to customize: Specify the type of attack or sector.
What it does: Compiles common vulnerabilities.
When to use: For training sessions or when reviewing application security.
How to customize: Add specific frameworks (e.g., OWASP) for tailored results.
What it does: Summarizes emerging threats.
When to use: Weekly or monthly review sessions with teams.
How to customize: Provide specific industries for customization.
What it does: Details the process for a security assessment.
When to use: When planning to perform security evaluations.
How to customize: Specify regions or compliance requirements.
What it does: Builds a security checklist.
When to use: During cloud deployment or audits.
How to customize: Specify cloud platforms like AWS, Azure, or GCP.
What it does: Structures customer communications.
When to use: Post security incident for required disclosures.
How to customize: Include templates for specific situations.
What it does: Provides a foundational understanding of the ATT&CK framework.
When to use: For training new team members or presentations.
How to customize: Request examples of specific tactics or techniques.
What it does: Evaluates and suggests enhancements.
When to use: To address compliance issues or performance gaps.
How to customize: Include specific technologies in use.
What it does: Provides a reflective analysis.
When to use: For leadership reviews post-incident.
How to customize: Focus on specific sectors or types of incidents.
Weak vs Strong Prompt Examples
Advanced Prompt Techniques
Using advanced techniques like **role prompting** (assigning the AI a specific role, e.g., “You are a threat analyst…”), **few-shot examples** (giving a few examples for desired output), and **output formatting** (requesting structured results like tables) enhances AI’s responses tremendously. Always try to be specific and clear about your expectations.
Claude vs ChatGPT: Which Works Better For This
While both Claude and ChatGPT offer robust responses, Claude tends to provide more concise and technical outputs suitable for analytical reports, whereas ChatGPT may offer better contextual understanding in conversational exchanges. Depending on the task, choose accordingly.
Tips for Getting Consistent Results
- Context Setting: Provide relevant background information in your prompts.
- Specificity: The more specific your request, the better the output.
- Iterative Refinement: Don’t hesitate to refine your prompts based on the output you receive.
Quick Reference: All Prompts in One Place
- Generate a detailed incident report for a phishing attack…
- List the top ten vulnerabilities found in web applications…
- Summarize the latest cybersecurity threats reported last month…
- Outline a step-by-step guide to conducting a security assessment…
- Create a checklist for securing a cloud environment…
- Draft a communication plan for informing customers about a data breach…
- Explain the significance of the MITRE ATT&CK framework…
- Suggest improvements to my organization’s current endpoint security measures…
- Generate a summary of lessons learned from recent cybersecurity incidents…