Artificial intelligence experts are cautioning individuals to use robust passwords and promptly update their device software to counteract the emergence of “AI-driven computer worms,” a novel form of cyber threat capable of executing tailored attacks on devices, depleting resources and data as they seek out new targets.
Recently, a team from the University of Toronto, spearheaded by Nicolas Papernot, the Canadian Institute for Advanced Research AI chair, disclosed that publicly available AI models can fuel a worm that can dynamically adjust its assault as it traverses internet-connected devices like laptops, printers, and cameras.
This research, carried out in partnership with the Vector Institute, was shared with various national bodies overseeing science, security, and defense before publication, as per the university.
Papernot, also an associate professor at U of T in computer engineering and computer science, is emphasizing the criticality of not disregarding or delaying software updates and the importance of regular password changes.
“We must elevate our cybersecurity practices. Reusing passwords is no longer an option. Employing multi-factor authentication, keeping devices up-to-date, and ensuring swift deployment of software patches by organizations are imperative,” he stated during a panel discussion at U of T.
Unlike traditional computer viruses, worms spread autonomously from one device to another without human intervention. The U of T researchers explained that their lab-developed worm collects data as it navigates through devices, uncovering passwords and vulnerabilities with each breach to facilitate further incursions.
In an unregulated environment, the researchers suggested that such a worm could access the internet, assimilating information from alerts about new vulnerabilities quicker than the corresponding software updates can be deployed to counter them.
“Some issues can be resolved through software updates. However, human errors like weak passwords and inadequate IT configurations cannot be remedied by mere patching,” the university detailed in a blog post about the discovery.
Papernot underscored the distinction by stating, “AI-driven computer worms can devise attack strategies unique to each device they encounter. Instead of relying on a single vulnerability, they interact with the victim device to craft a customized attack strategy.”
The article further delves into past cyber incidents, highlighting the havoc caused by the WannaCry worm in 2017 and the evolving landscape of AI threats, with mentions of recent rogue AI activities and warnings from experts about AI systems surpassing human control.
Moreover, it touches on the national artificial intelligence strategy released by the Canadian government, emphasizing the importance of AI adoption among businesses and the ongoing efforts to build public trust in AI technologies.
Papernot’s cautionary statements regarding the cost-effectiveness and efficiency of AI-driven worms compared to traditional threats are highlighted, along with insights from Samir Chhabra of Innovation, Science and Economic Development Canada concerning the evolving cybersecurity risks posed by these advanced threats.
The article concludes with a survey conducted by the Communications Security Establishment, indicating the cybersecurity practices of Canadian individuals and the need for enhanced security measures in critical infrastructures to mitigate the risks posed by AI-driven cyber threats.
