A security team uses an AI system to analyze log data for signs of compromise. The AI was trained on labeled datasets from 2021-2023. A new threat group emerges in 2024 using entirely novel techniques not seen before. What detection limitation will the team face?
- A.A. The AI cannot analyze log formats from 2024 because they differ from 2021-2023 formats
- B.B. The AI has no training signal for the new techniques, so it will likely miss them or only flag them if they happen to resemble known-malicious statistical patterns from training data
- C.C. The AI will classify all 2024 logs as malicious because the threat group's activity exceeds 2021-2023 baseline volumes
- D.D. The AI can detect the new techniques because adversarial training makes it inherently robust to novel attacks
Why B is correct