AI And Machine Learning… The New Cybersecurity Frontier

Ron Frechette

Cybersecurity Awareness – By Ron Frechette, The Cyber Guy

It’s estimated that about half of the world’s population watched the 2018 Olympics last month in Pyeongchang, South Korea.  An audience of that size tends to attract advertisements from some of the largest and most innovative companies on the planet. If you happened to tune in, you may have seen Microsoft’s “Empowering Innovation” commercial featuring hip hop artist, Common, who formally introduced the world to the power of artificial intelligence (aka AI).

The commercial opens with Common on-stage professing that through AI technology, we have more power at our fingertips than entire generations that came before us.  The final question he poses is, “What are you going to do with it?”  Great question to pose to a worldwide audience… depending on who is listening.  The motives of viewers can vary widely from the young promising data scientist at MIT, to the cyber threat actor working feverishly to launch the world’s next greatest cyber-attack.   The question for us is, “How will the power of this technology affect our lives as we venture further into the Digital Age?”

Artificial Intelligence and Machine Learning Defined

Artificial intelligence (AI) is the capability of a machine to imitate intelligent human behavior.  Machine learning (ML) is one of the hottest fields in computer science today. ML utilizes sophisticated algorithms that teach computers to learn without being explicitly programmed. It involves feeding huge amounts of data to an algorithm that allows a machine to adjust itself and improve on its own.  Think Terminator!

How Big Data Plays a Role in AI & ML Technology

AI & ML rely heavily on consuming Big Data to create complex algorithmic data models. These models have enabled computers to recognize data patterns much more accurately and quickly than humans.  This is how Netflix can suggest movies you would most likely enjoy watching. Self-driving cars, computers predicting stock market trends, winning Jeopardy, and the creation of digital personal assistants like Siri, and IBM’s Watson were all developed using artificial intelligence and machine learning.

Security Benefits and Risks of AI & ML

From a cybersecurity standpoint, AI & ML technology offer security professionals great promise in protecting our private information in cyberspace. On the other hand, it also creates a new platform for attackers to exploit for malicious purposes.

Security Benefits

• Determining Safe Device Behavior – AI & ML have the capability to monitor general network usage patterns which allows it to identify and block malicious activity faster.
• Monitoring Data Exchanges –AI & ML can identify something as suspicious, categorize legitimate threats and self-adjust its monitoring filters to stop a breach before it causes damage.
• Predict Threats Based on Historical Data – AI & ML systems are proficient at examining large amounts of data and adjusting themselves to predict potential attacks based on historical trends.

Security Threats

• Using AI & ML for Creating Malware – The first example of using AI & ML for malware creation was presented in 2017 in a paper entitled “Generating Adversarial Malware Examples for Black-Box Attacks Based on GAN.”
• Smart Botnet Attacks – Fortinet reports that 2018 will be the year of self-learning ‘hivenets’ and ‘swarmbots’, in essence the belief that ‘intelligent’ IoT devices can be commanded to talk to one another and attack vulnerable systems at much larger scales than we have seen in the past.
• Smarter Spear Phishing Email Attacks – AI & ML will be used to target high-net worth individuals by weaponizing data science for more effective social engineering campaigns.
• Infecting ML & IA Security Engines – this is essentially infecting the ML/IA system used for security and rendering it ineffective or harmful.

AI & ML is undoubtedly the new frontier in cyberspace. How we decide to act on the knowledge we gain will determine the degree of benefits and consequences we experience.

In closing, I refer back to the words Mr. Common so boldly professed, “Through AI, we have more power at our fingertips than entire generations that came before us. What are you going to do with it?”

Wishing you all a safe and peaceful journey in cyberspace.

Questions?  Send me a tweet @GoldskyRon.

Sources:

https://www.ispot.tv/ad/weFN/microsoft-corporation-empowering-innovation-featuring-common#

https://www.nytimes.com/2018/02/13/sports/olympics/olympics-nbc-viewers-digital.html

https://en.wikipedia.org/wiki/Common_(rapper)

https://genius.com/Stephen-hawking-on-the-threat-of-artificial-intelligence-annotated

https://www.merriam-webster.com/dictionary/artificial%20intelligence

by

by