The Cyber Security Arms Race and How AI is Changing the Battlefield Dr. Ben Apple A Brief History of AI • AI was founded as an academic discipline in 1956 • Dartmouth College, in Hanover, New Hampshire, the term "artificial intelligence" was coined. • From 1974 to 1980 is a time known as the winter of AI • Unfulfilled promises and waning government interest resulted in reduced funding • Around 1980 there was an AI boom • British government started funding AI to compete with efforts by the Japanese. • 1987 saw the second AI Winter • Stock market collapse blamed on expert system trading • From 1993 to 2011 new interest in AI • 1997, IBM's Deep Blue became the first computer to beat a chess champion • 2011 to present day – The age of Deep Learning, Big Data, and General AI • 2011, Watson won Jeopardy by beating out the reigning champions • ChatBot beats the Turing Test • AlphaGo seen by many as the new dawn of AI • 2015 AlphaGo to beats a human Go master • 2016 AlphaGo beats Lee Sedol one of the top 5 Go masters in the world • 2017 AlphaGo beats Ke Jie the worlds number 1 Go master and is awarded the level of 9-Dan AI Under Attack • AI is not a Panacea • AI Cannot be eft to its own devices • The use of AI in Cyber Security requires a Hybrid Approach • AI will free our high value assets from the mundane • AI provides the predictive insight needed to head-off attacks before they occur The Emergence of AI in Cyber SEcurity • Machine learning and artificial intelligence (AI) are being applied more broadly across industries and governments. • This means new exploits and weaknesses can quickly be identified and analyzed to help mitigate further attacks. • If trained by the best AI can become the best. The Future Face of the Cyber Security Profession • The growing capabilities of artificial intelligence are triggering a battle across the cyber security fence – and organizations must act now to be on the right side of it. • Not only must organizations invest in preventative AI, but the government, at all levels, must continue to back the development of the next generation of technology professionals. • If we are going to be able to protect the crown jewels, we must invest in the cadre of future Cyber Security professionals, the adversaries are certainly investing in their cadre. • The need for a cyber security overhaul is necessary as the traditional practcises are no longer effective in identifying and preventing attacks. The Attackers Will Up Their AI Game • Software and Systems ae Complex, it is very near impossible to identify all vulnerabilities prior to release, creating a target rich environment for AI powered attackers. • The attackers are using AI to scan the Internet looking for possible targets • Then there is the weakest link in the chain, the human. • AI is being used to emulate human behaviors in phishing attacks. Insider Threat • AI is being effectively used to detect anomalous user behavior. • AI is well suited for tasks such as Sentiment Analyses, to identify possible disgruntled employees. We still need a human to make the actual judgement call. The Skills Gap • Centre for Cyber Safety and Education revealing that the world will face a shortfall of 1.8 million cyber security professionals by 2022. • AI can release these scarce resources from the mundane. • Preventive and Predictive AI will enhance the delivered value of the Cyber Seurity Professional. The Future • Recognize what machines do best and what people do best. • Use AI to do the repetitive, such as first pass log review. • Cyber Security Professionals use their minds to develop creative solutions to the hard problems. • AI acts as the inference engine that feeds the Cyber Security Decision makers. • AI will keep us the defenders ahead of the adversary, the attackers.