As we enter 2024, the world is on the cusp of significant advancements in artificial intelligence (AI) and quantum computing. While these cutting-edge technologies offer great potential, they also bring new challenges in cybersecurity.
One major concern is the misuse of generative AI, or gen AI, by malicious actors. This has led to an increase in ransomware attacks, state-sponsored cyber espionage, and the need to secure the expanding internet of things (IoT).
Additionally, the misuse of technology has resulted in the development of more advanced malware for surveillance and targeting specific systems and vulnerabilities.
Furthermore, cybercriminals are integrating AI into their attacks, making them more sophisticated and cost-effective. They can create phishing campaigns, write malicious code, and identify vulnerable systems to exploit.
“Cybercriminals and state actors are already taking advantage of generative AI to create phishing campaigns, write malicious code, or identify vulnerable systems to exploit,” said Mihoko Matsubara, chief cybersecurity strategist at IT services and consulting firm NTT.
The Positive Impact of AI on Cyber Defense
Despite the challenges posed by gen AI, AI also offers opportunities to enhance cybersecurity strategies and technologies. It can improve detection and analysis capabilities, leading to better defense against disinformation, phishing, malware, and anomalous behavior. It can also automate security operations, addressing workforce challenges.
Cybersecurity professionals have found generative AI helpful in automating tasks, data analysis, and vulnerability research. For example, research by NTT Security Holdings showed that generative AI improved the efficiency and accuracy of identifying phishing sites.
However, the use of gen AI also provides offensive tools to novice threat actors. The effectiveness of these tools depends on the skills of those using them.
In the future, offensive AI could be used throughout the attack life cycle, involving natural language processing and image classification to craft spear phishing emails and exfiltrate sensitive documents.
Key Trends for Better Security
NTT cyber experts predict four key trends that will impact the security landscape in 2024:
1. Safeguarding trust in election results will become crucial, with a focus on manual validation and logging of results to address concerns.
2. Implementing a Zero Trust framework will enhance security defenses in an increasingly cloud-native environment.
3. Preparing for the quantum threat will be essential, as quantum technology becomes more prevalent in the future.
4. Advancing cryptography and encryption research will explore new ways to safeguard data, with a focus on privacy concerns in interactions with AI models.
The Role of AI in Cybersecurity
AI is already making a positive impact in cybersecurity beyond task automation. It enhances response automation, behavioral analysis, and vulnerability remediation. Cybersecurity professionals with practical insights will play a crucial role in guiding the deployment of AI.
The emergence of gen AI has created an arms race among companies, governments, and cybercriminals. It is expected to accelerate the use of AI in email security over the coming year, similar to how cloud security solutions transformed cybersecurity systems during the pandemic.
As we embrace the advancements in AI and quantum computing, it is important to address the challenges they bring in cybersecurity. By leveraging AI’s capabilities and staying ahead of evolving threats, organizations can navigate this technological surge while ensuring their digital defenses remain strong.