Cybersecurity professionals can rarely have a conversation among peers these days without artificial intelligence—ChatGPT, Bard, Bing, etc.—coming up. Is it good? Is it bad? Is it inevitable (yes)? What are the possibilities, concerns, risks, and opportunities? Here are a few articles curated on the AI topic, with some highlights from each.
ZDNET: ChatGPT and AI wreaking havoc on cybersecurity
This Q&A with Recorded Future CEO Christopher Ahlberg gets his take on AI automating 25% of the workforce; ChatGPT being more of an 'alien intelligence' than comparable to the human brain; and just how ChatGPT works.
"Threat hunters are using AI to identify unusual patterns and summarize large amounts of data, connecting the dots across multiple sources of information and hidden patterns.
The work still requires human experts, but Ahlberg says the generative AI technology we're seeing in projects like ChatGPT can help."
Visual Capitalist: A cool infographic examining the attitude toward and acceptance of AI around the globe
The data is based on a 28-country survey of 19,504 adults aged 18 to 74. One key takeaway: People living in wealthier economies view AI products and services less positively.
Notable results show China gave AI products and services a 78% approval rating, while the U.S. ranked them at less than 40%. France was dead last at just over 30%; Mexico at 65%; and Japan at 42%.
(ISC)2: Poll shows AI should be regulated ASAP
"In the face of the recent open industry letter calling for a pause in development of artificial intelligence (AI) technology, a group of (ISC)2 members were asked if they agreed with the likes of Apple co-founder Steve Wozniak and Tesla/SpaceX head Elon Musk.
Overall, of the 163 members and candidates who participated, over a third (34.3%) agreed with this idea, with 58.9% against and 6.7% expressing no opinion. While the majority favored no interruption, the extent of the majority view was surprising...."
What does ChatGPT itself think of the topic?
Since this is a blog on the AI topic, I asked ChatGPT itself the question, "What are the possibilities, concerns, risks, and opportunities as it relates to cybersecurity?" Here's what it cranked out (unedited):
"AI has the potential to be a powerful tool for cybersecurity, as well as a potential threat to security. Here are some possibilities, concerns, risks, and opportunities of AI in relation to cybersecurity:
Possibilities:
- AI can help identify and prevent cyber threats in real-time. With the ability to analyze large volumes of data in real-time, AI can help detect patterns and anomalies that indicate a potential attack, allowing for faster and more effective response times.
- AI can automate certain cybersecurity tasks, such as patch management and software updates. This can help reduce the workload for human cybersecurity professionals and improve the overall efficiency of the security system.
- AI can help improve the accuracy of threat detection. By analyzing large amounts of data and learning from past incidents, AI can identify potential threats that might have been missed by human analysts.
Concerns:
- AI can be vulnerable to attacks. Just like any other software system, AI systems can be hacked, tricked, or compromised, potentially giving attackers access to sensitive data or control over the system.
- AI can be biased. The algorithms used in AI systems can perpetuate biases and discriminatory practices, leading to unfair treatment of individuals or groups.
- AI can be used for malicious purposes. Cybercriminals can use AI to develop more sophisticated and effective attack methods, such as spear-phishing or social engineering attacks.
Risks:
- Over-reliance on AI. If organizations become too dependent on AI for cybersecurity, it could lead to a false sense of security and neglect of other important security measures.
- Lack of human oversight. If AI is used to automate too many tasks, it could lead to a lack of human oversight and an inability to respond to complex or unexpected situations.
Opportunities:
- Improved threat detection. AI can help identify and prevent cyber threats in real-time, allowing for faster and more effective response times.
- Increased efficiency. AI can automate certain cybersecurity tasks, reducing the workload for human cybersecurity professionals and improving overall efficiency.
- Enhanced security. By improving threat detection and response times, AI can help enhance overall security and protect against cyber attacks.
Overall, the use of AI in cybersecurity presents both opportunities and risks. While AI has the potential to improve threat detection and response times, organizations must also be aware of the potential risks and limitations of AI and ensure that human oversight and other security measures are in place to mitigate these risks."
The AI/ChatGPT topic is on the June 8th SecureWorld Chicago conference agenda, with a panel session on "The Future of Privacy and Cyber: AI, Quantum, and Mind Readers" featuring Monique Ferraro, Cyber Counsel, HSB Insurance; Karen Painter Randall, Partner & Chair, Cybersecurity, Data Privacy, and Incident Response, Connell Foley LLP; Violet Sullivan, VP, Client Engagement, Redpoint Cyber; and moderator Jordan Fischer, Cyber Attorney, Global Leader of Privacy Practice Group, Octillo Law.
