ORCAGen: Orchestrating Context-Aware Malware Deception with RAG-Guided Generative AI
ORCAGen uses GenAI and Retrieval-Augmented Generation (RAG) to build malware deception playbooks offline. It generates proof-of-concept malware and orchestration code by grounding the process in structured knowledge about malware procedures and defense strategies. This allows for offline validation before runtime enforcement, creating highly specific, executable defenses against real threats.