JUNE 2019CIOAPPLICATIONSEUROPE.COM8IN MYOPINIONhile many organisations are deploying appropriate patching strategies, conducting vulnerability scans and ensuring that their anti-virus is appropriately updated, it seems premature to be concerned about the world of Artificial Intelligence (AI) and how it might impact everyday businesses. But how far are we all from having to face up to the threats presented by AI-powered malware?Not very far, we are yet to see a major concerted attack using AI as its foundation. However, recently, signs in the cyber industry suggest that this is a cause for concern that needs to be seen with serious consideration. It may not be easy to continue confining it to a scenario of science fiction novels much longer.IBM recently created and released `DeepLocker' to test how an AI-powered malware could impacts current anti-virus solutions. Their developed model of hiding a malicious payload inside regular, everyday applications and creating intelligent `release triggers' has successfully fooled current anti-malware software. This enabled the test strain of Malware to remain hidden on the network.Perhaps, the most worrying thing about DeepLocker is that it could manifest itself on an infected machine for a long period of time and stay hidden while allowing very limited ability by the managing organisation to locate and destroy it. This kind of `wrapping' has been seen by many of the most prevalent pieces of malware recently. Criminal enterprises can wrap up the requested malware and sell it as a ready-made service. Sentiment in the industry seems to consider the support arrangements of these criminal enterprises as significantly above that which they receive from some of their own suppliers.So, can we expect this method of attack to be weaponised soon? Malwarebytes have named AI-powered virus infections on their expected active threats in 2019, and that unfortunately means it is highly likely that advanced prototypes already exist. It's very possible that some have already been deployed in earnest. If one considers the requirement to get advanced malware into a readily deployable form, we can see how soon this is likely to be become a reality: · Cost: the development cost needs to be outweighed by the potential gain. While less advanced malwares are still bringing rewards to the criminal enterprises that created them, more advanced attacks are unnecessary. However, many of those most prevalent malwares are starting to lose their ability to generate significant returns. The ease with which they are created means that they continue to be used. But criminals are already starting to move on to new trends (such as skimming) to increase their returns. When the return on investment of these pieces of Malware falls beneath a certain level, their evolution is inevitable. It stands to reason that artificial intelligence would be that evolution.· Skillset: Do advanced artificial intelligence skills exist and do criminals have access to them? Perhaps not at the moment but where there is revenue there will be MARTYN BOOTH, CHIEF INFORMATION SECURITY OFFICER, EUROMONEY INSTITUTIONAL INVESTOR PLCWArtificially Intelligent Malware: not as Futuristic as you Might ThinkMartyn Booth
< Page 7 | Page 9 >