07/28/2023  ::  Jeremy Pickett  :: Become a Patron  ::  Buy Me a Coffee (small tip)

The backbone of our society, our critical infrastructure, is witnessing escalating cyber threats, but also novel opportunities brought forth by AI. Can we afford to let AI play a significant role in securing our power grids, SCADA systems, and emergency networks like 911 and Amber Alerts?

In recent years, our dams, utilities, emergency service networks, and other fundamental systems have fallen prey to hackers whose identities range from mischievous vandals to formidable, state-sponsored operatives. Are we sufficiently equipped to counter these intensifying threats that seem to be outpacing traditional security measures?

As a reaction to these growing threats, security teams guarding our infrastructure are contemplating bolstering their defenses with tools that incorporate machine learning and automation. With AI promising swift anomaly detection, threat intelligence integration from expansive datasets, and a coordinated rapid response, could real-time cyber defense operating at machine speeds be the answer to countering the ever-evolving risks?

The backbone of our society, our critical infrastructure, is witnessing escalating cyber threats, but also novel opportunities brought forth by AI. Can we afford to let AI play a significant role in securing our power grids, SCADA systems, and emergency networks like 911 and Amber Alerts?

In recent years, our dams, utilities, emergency service networks, and other fundamental systems have fallen prey to hackers whose identities range from mischievous vandals to formidable, state-sponsored operatives. Are we sufficiently equipped to counter these intensifying threats that seem to be outpacing traditional security measures?

As a reaction to these growing threats, security teams guarding our infrastructure are contemplating bolstering their defenses with tools that incorporate machine learning and automation. With AI promising swift anomaly detection, threat intelligence integration from expansive datasets, and a coordinated rapid response, could real-time cyber defense operating at machine speeds be the answer to countering the ever-evolving risks?

However, the subject isn't without its controversies. Security experts sound an alarm against an excessive reliance on AI for security. Algorithms, while proficient at analysis, lack the human ability to make judgments within a complex, real-world context. Can we afford to overlook these limitations, especially when AI's understanding of nuanced ethics remains questionable? Autonomous systems risk behaving unpredictably or even entrenching bias. Is it prudent to trust an algorithm to replicate the discretion, expertise, and oversight accountability of human security specialists?

In both types of instances, a key lesson has been the importance of maintaining a balance between automation and human supervision. While AI and automation can significantly enhance efficiency and response times, human oversight is still essential to ensure that systems function as expected and to intervene when unexpected situations arise. The challenge lies in determining the optimal balance to ensure both efficiency and safety.

AI's role should be meticulously confined to filtering alerts, automating routine tasks, and scanning for known threats. Can we entrust AI with these responsibilities while ensuring that critical decisions with profound impacts remain firmly in the hands of humans? No. For instance, is an AI system capable of deciding independently if the implications of disconnecting power to millions justify thwarting an intrusion? Absolutely not, this cannot happen. Recent talks from David Shapiro (YouTube) and Elon Musk clearly show that attention is finally being taken in the realm of 'Alignment'. David calls this Axiomatic Alignment, and revolves around common-sense strategies to imbue AI systems with, well, Common Sense. Please see David for more in depth analysis of these subjects.

Furthermore, post-incident reviews must scrutinize if AI has responded appropriately, taking careful measures to assess unintended harm. Can we rely on AI to learn from these reviews and modify its future responses accordingly? Again, a resounding No. Human-led red teams should consistently examine the systems for any unfair bias or vulnerabilities that could be manipulated. As we forge ahead on this path, it's crucial to remember that AI's role should not be to replace but to augment human efforts in securing society's most vital networks. Can we achieve this delicate balance without compromising on the safety and reliability of our critical infrastructure?

AI will deliver a series of profound changes much faster than many of us believed possible, and this inflection point should not be wasted in the need for speed.