To have even a chance of mitigating catastrophic artificial intelligence (AI)- based hacking of a business or government agency, cyber defenders need to identify such attacks within 15 minutes, Trellix Chief Technology Officer Mo Cashman said on Tuesday.
Speaking at the Cyber Security conference at Tel Aviv University, Cashman stated that there is an accelerated four-stage timeline for preventing the worst effects of high-speed AI cyber attackers.
The observe or threat identification stage would need to take place within 15 minutes, the orientation stage within two hours, the decision stage within four hours, and the action stage within four to 72 hours, depending on the nature of the threat.
The orientation stage involves better understanding the nature and implications of the threat after the identification stage identifies an abnormality or threat.
Next, the decision stage determines what response or actions are needed to fix or mitigate the harm, and the action stage implements the solutions designed to end or subdue the attack's effects.
PHP vulnerabilities highlight urgent need for faster cyberattack responses
Trellix discussed the need to greatly accelerate response times to hacks and vulnerabilities found by AI reviews of systems, following the disclosure of the PHP programming vulnerabilities.
In late October, the cybersecurity world and governments globally panicked over the PHP programming vulnerability, saying it left potentially 70% of the internet hackable until it was patched.
Cashman said that in some instances, his cybersecurity team has been able to begin partial remediation of hacking attacks within 20 minutes by ensuring certain digital security assets are in place for a given client before an attack.
This means those assets to combat a cyberattack can be deployed remotely, even before sending a physical team to perform more complete remediation.
AISLE Chief Information Security Officer (CISO) and Chief Operating Officer Jaya Baloo told the conference that while cyber attackers have always had an arms-race advantage over defenders in the ratio of funds invested to attack versus funds invested to defend, AI has substantially worsened the imbalance.
She said attackers can now pay as little as $25 to mount a semi-sophisticated attack, while defenders will need to spend large sums to defend against it.
According to Baloo, much of the increased imbalance stems from US and Chinese companies rushing out new AI models without accounting for their potential to cause danger and chaos.
She said that governments must rapidly regulate and criminalize conduct perpetrated by certain AI models or those who make them will continue to do so with impunity.
Baloo also specifically called out UNITREE products as hackable and questionable in trustworthiness.
The Jerusalem Post has requested a response from UNITREE to these allegations.
CrowdStrike urges West to accelerate AI development despite cyber threats
Despite these warnings about the dangers of AI for cyberattacks, CrowdStrike Chief Business Officer Daniel Bernard said that the US, Israel, and the West must press onward with AI advancement without any pause or slowdown.
Many leading officials at Anthropic, OpenAI, and others have called for a sector-wide slowdown or pause to better understand the capabilities of newly unveiled generative AI systems.
In contrast, Bernard said his company has developed an AI "Kill Switch" that can address AI gateways, cloud agents, user permissions, agent permissions, and other issues, restoring safety for newer AI models.
He said "the genie is out of the bottle," and that "the adversary is not going to slow down…or sign a pause agreement," emphasizing that the West will fall behind China and others if it slows AI development.
Continuing, he said, "if you run AI in a sandbox, you risk being left behind," referring to a safe digital environment disconnected from the wider internet.
Microsoft Israel Director of R&D Michal Braverman-Blumenstyk said at the conference that the key to combating AI problems was to constantly study what is happening inside the "AI brain," much like medical machines are used to study what catalysts cause certain neurons in the human brain to activate.
She said it was insufficient to only study the impacts of AI if and when it goes rogue.
Further, she said that to study AI's internal processes, it was important that these processes be made open, and not locked into a "black box" from clients and users.
IDF harnesses AI to analyze vast amounts of wartime data
Head of the IDF J6 & Cyber Defense Directorate Maj.-Gen. Aviad Dagan spoke at the conference, saying that the military had used AI to assemble incredible amounts of data from three years of war.
He said this data could be used to develop practically magical strategies for future wars, whether in tunnel warfare, mountain warfare, or any other terrain.
Dagan also noted that the IDF is moving toward using AI agents to help initiate and propose military plans in the future. But he said it would be the human soldier who would make the final decisions.
Follow us on GoogleSource: The Jerusalem Post · YONAH JEREMY BOB
At a glance
- Topic
- World
- Country
- 🇮🇱 IL
- Publisher language
- EN
- Added to Allnira