Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
The Double-Edged Sword of Artificial Intelligence in Security
Newest First  |  Oldest First  |  Threaded View
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
7/29/2018 | 12:35:08 PM
AI as a tool
It's no surprise that cyber experts are concerned. After all, for hackers, AI presents the ideal tool to enable scale and efficiency I agree with this, AI is just a tool, it can be bused for good and bad purposes.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
7/29/2018 | 12:24:34 PM
Re: The unfortunate choice of the term: "Artificial Intelligence"
Fuzzy Logic have the capability to generate astonishing and highly useful results; but those results come from a new kind of collective human intelligence Agree with this. With AI we are trying to take the human out of this equation.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
7/29/2018 | 12:19:59 PM
Re: The unfortunate choice of the term: "Artificial Intelligence"
form of automation - and their "decisions" are predetermined by programming AI is less about programming but more about training. Basically training produces program for us.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
7/29/2018 | 12:14:50 PM
Re: The unfortunate choice of the term: "Artificial Intelligence"
Yet, even these are apt to let some important components of their "HI" (Human Intelligence), For me the ultimate goal of AI is to simulate HI (human intelligence)
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
7/29/2018 | 12:12:02 PM
AI in cybersecurity
Based on the amount of data that needs to be porcessed daily ther is no practical way of managing security than using an automated system. No amount of human resource will be enough to manage the security talks in todays world sine that is huge and requires more efficient way of analyzing it.
BrianN060
50%
50%
BrianN060,
User Rank: Ninja
7/27/2018 | 11:50:49 AM
The unfortunate choice of the term: "Artificial Intelligence"
I'd guess most readers here have a pretty good (some even an expert's), idea of the mechanisms within the technologies categorized as "AI".  Yet, even these are apt to let some important components of their "HI" (Human Intelligence), lead them to the same false implications as the layman; in a way similar to that which brought Percival Lowell to interpret the observation of "canali" (grooves or channels), by an Italian astronomer, as evidence of "MI" (Martian Intelligence).  Just as Carl Sagan pointed out, the real intelligence [perception, imagination and creativity] was on Lowell's end of the telescope.

https://en.wikipedia.org/wiki/File:Karte_Mars_Schiaparelli_MKL1888.png 

https://en.wikipedia.org/wiki/File:Lowell_Mars_channels.jpg

The article has "...AI and its ability to make automated decisions..."; which is fine, as long as you understand that AI technologies are a form of automation - and their "decisions" are predetermined by programming.   Programs don't "decide" any more than an electron decides which path to take through a transistor.  Incorporation of powerful statistical processes, unprecedented computational power and Fuzzy Logic have the capability to generate astonishing and highly useful results; but those results come from a new kind of collective human intelligence - nothing artificial about it. 

Keep this in mind, and we're less apt to wonder down the road that leads to "UFO" implying spacecraft of extraterrestrial origin (rather than that not all objects observed flying are identified); or that recognizing that the earth's climate has always been changing should implies that we buy into a particular catechism of assumptions known as "climate change". 


Exploits Released for As-Yet Unpatched Critical Citrix Flaw
Jai Vijayan, Contributing Writer,  1/13/2020
Major Brazilian Bank Tests Homomorphic Encryption on Financial Data
Kelly Sheridan, Staff Editor, Dark Reading,  1/10/2020
Will This Be the Year of the Branded Cybercriminal?
Raveed Laeb, Product Manager at KELA,  1/13/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The Year in Security: 2019
This Tech Digest provides a wrap up and overview of the year's top cybersecurity news stories. It was a year of new twists on old threats, with fears of another WannaCry-type worm and of a possible botnet army of Wi-Fi routers. But 2019 also underscored the risk of firmware and trusted security tools harboring dangerous holes that cybercriminals and nation-state hackers could readily abuse. Read more.
Flash Poll
[Just Released] How Enterprises are Attacking the Cybersecurity Problem
[Just Released] How Enterprises are Attacking the Cybersecurity Problem
Organizations have invested in a sweeping array of security technologies to address challenges associated with the growing number of cybersecurity attacks. However, the complexity involved in managing these technologies is emerging as a major problem. Read this report to find out what your peers biggest security challenges are and the technologies they are using to address them.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-3682
PUBLISHED: 2020-01-17
The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node.
CVE-2019-17361
PUBLISHED: 2020-01-17
In SaltStack Salt through 2019.2.0, the salt-api NEST API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host.
CVE-2019-19142
PUBLISHED: 2020-01-17
Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI.
CVE-2019-19801
PUBLISHED: 2020-01-17
In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an unprivileged but authenticated user is able to perform a backup of the Command Centre databases.
CVE-2019-19802
PUBLISHED: 2020-01-17
In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5), v7.90 prior to v7.90.991(MR5), v7.80 prior to v7.80.960(MR2) and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without p...