Automated cyberattacks siv AI: Thaum cov tshuab ua cybercriminals

• Author:
• Tus sau lub npe

  Quantumrun Foresight
• Cuaj hlis 30, 2022

Cov ntsiab lus ntawm kev nkag siab

Artificial txawj ntse (AI) thiab kev kawm tshuab (ML) tau siv ntau dua hauv kev ruaj ntseg cybersecurity, ob qho tib si rau kev tiv thaiv kab ke thiab hauv kev tua cyberattacks. Lawv lub peev xwm los kawm los ntawm cov ntaub ntawv thiab kev coj cwj pwm ua rau lawv txheeb xyuas qhov tsis zoo ntawm cov kab ke, tab sis kuj ua rau nws nyuaj rau taug qab cov hauv qab no algorithms. Qhov kev hloov pauv ntawm AI hauv cybercrime no ua rau muaj kev txhawj xeeb ntawm cov kws tshaj lij IT, xav tau cov tswv yim tiv thaiv qib siab, thiab tuaj yeem ua rau muaj kev hloov pauv tseem ceeb hauv tsoomfwv thiab tuam txhab lag luam mus txog cybersecurity.

Automated cyberattacks siv AI ntsiab lus

Artificial txawj ntse thiab ML tuav lub peev xwm los ua haujlwm ze li ntawm txhua txoj haujlwm, suav nrog kev kawm los ntawm kev coj tus cwj pwm rov ua dua thiab cov qauv, ua lub cuab yeej muaj zog los txheeb xyuas qhov tsis zoo hauv lub cev. Qhov tseem ceeb tshaj, AI thiab ML ua rau nws nyuaj rau kev txheeb xyuas tus neeg lossis ib lub koom haum tom qab lub algorithm.

Xyoo 2022, thaum lub sijhawm US Senate Armed Services Subcommittee ntawm Cybersecurity, Eric Horvitz, Microsoft tus thawj coj saib xyuas kev tshawb fawb, tau hais txog kev siv kev txawj ntse ntse (AI) los ua kom cyberattacks ua "kev tawm tsam AI." Nws tau hais tias nws nyuaj rau txiav txim siab seb puas yog cyberattack yog AI-tsav. Ib yam li ntawd, qhov kev kawm tshuab (ML) tau raug siv los pab cyberattacks; ML yog siv los kawm cov lus siv thiab cov tswv yim hauv kev tsim cov passwords kom hack lawv zoo dua. 

Kev tshawb fawb los ntawm lub tuam txhab cybersecurity Darktrace tau tshawb pom tias pawg tswj hwm IT muaj kev txhawj xeeb ntau ntxiv txog qhov muaj peev xwm siv AI hauv cybercrimes, nrog 96 feem pua ​​​​ntawm cov neeg teb qhia tias lawv twb tshawb nrhiav cov kev daws teeb meem. IT cov kws paub txog kev ruaj ntseg xav tias muaj kev hloov pauv hauv cyberattack txoj hauv kev los ntawm ransomware thiab phishing mus rau ntau cov malware uas nyuaj rau kev ntes thiab deflect. Qhov muaj feem pheej hmoo ntawm AI-enabled cybercrime yog qhov kev qhia txog cov ntaub ntawv tsis raug lossis raug siv hauv ML qauv.

Kev tawm tsam ML tuaj yeem cuam tshuam rau software thiab lwm yam thev naus laus zis tam sim no tau tsim los txhawb kev suav huab thiab ntug AI. Cov ntaub ntawv kev cob qhia tsis txaus kuj tseem tuaj yeem rov ua cov txheej txheem kev tsis ncaj ncees xws li kev sau npe tsis raug rau pawg neeg tsawg lossis cuam tshuam rau kev saib xyuas tub ceev xwm rau lub hom phiaj ntawm cov zej zog marginalized. Artificial Intelligence tuaj yeem qhia cov ntaub ntawv hloov maj mam tab sis muaj kev puas tsuaj rau hauv cov kab ke, uas yuav muaj qhov tshwm sim ntev.

Kev cuam tshuam

Kev tshawb fawb los ntawm Georgetown University cov kws tshawb fawb ntawm cyber kill chain (ib daim ntawv teev npe ntawm cov haujlwm tau ua los ua kom muaj kev vam meej cyberattack) tau pom tias cov tswv yim kev tawm tsam tshwj xeeb tuaj yeem tau txais txiaj ntsig los ntawm ML. Cov txheej txheem no suav nrog spearphishing (e-mail scams qhia rau cov neeg tshwj xeeb thiab cov koom haum), taw qhia qhov tsis muaj zog hauv IT infrastructures, xa cov lej phem rau hauv tes hauj lwm, thiab zam kev tshawb pom los ntawm cybersecurity systems. Kev kawm tshuab kuj tseem tuaj yeem ua rau muaj feem cuam tshuam txog kev sib raug zoo engineering ua tiav, qhov twg tib neeg raug dag ntxias kom nthuav tawm cov ntaub ntawv rhiab lossis ua haujlwm tshwj xeeb xws li kev lag luam nyiaj txiag. 

Tsis tas li ntawd, cyber kill chain tuaj yeem siv qee cov txheej txheem, suav nrog: 

• Kev soj ntsuam dav dav - autonomous scanners sau cov ntaub ntawv los ntawm lub hom phiaj network, suav nrog lawv cov kev sib txuas, kev tiv thaiv, thiab kev teeb tsa software. 
• Kev siv riam phom loj - AI cov cuab yeej txheeb xyuas qhov tsis muaj zog hauv kev tsim kho vaj tse thiab tsim cov cai kom nkag mus rau cov qhov khoob no. Qhov kev tshawb nrhiav tsis siv neeg no tuaj yeem tsom rau cov ecosystems lossis cov koom haum tshwj xeeb. 
• Kev xa lossis nyiag khoom - AI cov cuab yeej siv automation los ua spearphishing thiab social engineering txhawm rau tsom ntau txhiab tus neeg. 

Raws li xyoo 2023, kev sau cov lej nyuaj tseem nyob hauv thaj tsam ntawm tib neeg cov programmers, tab sis cov kws tshaj lij ntseeg tias nws yuav tsis ntev ua ntej cov tshuab tau txais cov txuj ci no, thiab. DeepMind's AlphaCode yog ib qho piv txwv tseem ceeb ntawm cov tshuab AI siab heev. Nws pab cov programmer los ntawm kev txheeb xyuas cov lej ntau los kawm cov qauv thiab tsim cov kev daws teeb meem zoo

Kev cuam tshuam ntawm automated cyberattacks siv AI

Kev cuam tshuam dav dav ntawm kev siv cyberattacks siv AI tuaj yeem suav nrog: 

• Cov tuam txhab sib sib zog nqus lawv cov peev txheej tiv thaiv cyber los tsim cov kev daws teeb meem cyber siab heev txhawm rau txheeb xyuas thiab nres kev siv cyberattacks.
• Cybercriminals kawm ML txoj hauv kev los tsim cov algorithms uas tuaj yeem nyiag nyiag kev lag luam thiab pej xeem cov txheej txheem.
• Cov xwm txheej nce ntxiv ntawm cyberattacks uas yog qhov zoo-orchestrated thiab tsom ntau lub koom haum txhua lub sijhawm.
• Kev tawm tsam AI software siv los txeeb tswj cov tub rog riam phom, tshuab, thiab cov chaw ua haujlwm hauv tsev.
• Kev tawm tsam AI software siv los nkag mus, hloov kho lossis siv lub tuam txhab cov txheej txheem los txo cov pej xeem thiab ntiag tug infrastructure. 
• Qee lub tseem fwv muaj peev xwm rov txhim kho cov kev tiv thaiv digital ntawm lawv cov kev lag luam ntiag tug hauv kev tswj hwm thiab kev tiv thaiv ntawm lawv cov koom haum cybersecurity hauv lub tebchaws.

Cov lus nug los xav txog

• Dab tsi yog lwm qhov yuav tshwm sim ntawm AI-enabled cyberattacks?
• Lwm cov tuam txhab yuav npaj li cas rau kev tawm tsam zoo li no?