CYBERSECURITY REVIEW 19 AUGUST 2024the level of sophistication and complexity of cyberattacks, which varies greatly from one to another. Behind the most dangerous and sophisticated cyber-attacks likely to use AI may be highly specialized groups financed by certain States, whose attacks may be directed at critical infrastructures in another country or to generate disinformation campaigns.If we analyze potential attackers from another perspective, that of their way of operating, they can use AI both to exploit known vulnerabilities and to find or create unknown ones. In addition to the offensive use of AI by cyber-attackers to learn behavior patterns of future victims, it can also be used to quickly crack passwords and captchas, build malware that evades detection, hide where they cannot be found, adapt as soon as possible to the countermeasures that can be taken, as well as for the automatic obtaining of information using methods of natural language processing (NLP) and the impersonation and generation of false audios, videos, and texts. Attackers are also using generative adversarial networks (GANs) to mimic normal communications traffic patterns in order to deflect attention from an attack and quickly find and extract sensitive data.ARE AI SYSTEMS VULNERABLE TO CYBERATTACKS?Attackers can use AI systems to not only make their own decisions but also to manipulate the decisions made by others. In a simplified way, an AI system is still a software system in which data, models, and processing algorithms are used. In this sense, an AI system that has not been developed with cybersecurity by design can be vulnerable to cyberattacks that target the AI data, model, or algorithm and cause undesired results or wrong decisions in the system. Different companies have already suffered attacks on commercial AI systems.According to Gartner data poisoning will be a huge cybersecurity threat in the coming years, Data poisoning involves tampering with machine learning training data to produce undesirable outcomes. An attacker can alter the training data in various ways, such as injecting false data, modifying existing data, or manipulating the weighting of specific data points. These alterations can cause the machine learning model to produce inaccurate results, leading to incorrect decisions and potential financial losses.All identified attack tactics have been collected in a knowledge base of threats to artificial intelligence in order to support the collection, structuring, and reuse of knowledge about threats to AI systems and how to act to minimize the impact of these cyber threats. Along these lines, technology organizations, along with other private entities, launched the Adversarial ML Threat Matrix, an open framework designed to help security analysts detect, respond to, and resolve threats that may occur against machine learning systems.ADDRESSING CYBERSECURITY FROM ARTIFICIAL INTELLIGENCEIf we want to minimize the additional effort that will have to be made in the future to solve the problems generated, in this case when developing AI systems without taking cybersecurity into account, we must act throughout the AI development cycle and throughout the supply chain to create safe and fair AI systems.CONCLUSIONArtificial intelligence has great potential to improve cybersecurity, but it also has certain drawbacks. On the plus side, it can be used to identify patterns and anomalies in large data sets, allowing for faster and more accurate detection of cyberattacks. It can also be used to automate the response to attacks and to better protect critical data and systems.On the negative side, For example, machine learning algorithms used to train AI systems can be fooled by cunning attackers who change their behavior to avoid detection. There are also concerns that AI systems could be used to carry out advanced cyberattacks, such as social engineering, by generating personalized, authentic-sounding messages to trick users.From all this, the conclusion that we can draw from the eruption of artificial intelligence in the world of Cybersecurity is that we have to take advantage of it and take advantage of it as another tool, that if we can provide it with a large amount of data from our organization, and working on the appropriate use cases will be of great help in automating certain more mechanical or tedious processes, allowing professionals to focus their efforts on contributing experience and knowledge at those points where they contribute the most value to the organization. A phishing attack may appear to be a legitimate email from a trusted company. However, by identifying patterns in emails, you can detect possible phishing
< Page 9 | Page 11 >