Artificial intelligence experts are cautioning the public to enhance their cybersecurity measures by using robust passwords and promptly updating software on their devices to counter the emergence of “AI-driven computer worms.” These advanced cyber-threats can launch tailored attacks on devices, depleting processing power and information while seeking out new targets.
Recently, a team from the University of Toronto, led by Nicolas Papernot, demonstrated that publicly available AI models have the capability to fuel a worm that can adjust its attacks in real-time as it spreads across internet-connected devices like laptops, printers, and cameras. The research, conducted in partnership with the Vector Institute, was shared with key national bodies before publication.
Papernot, an associate professor at the University of Toronto, emphasized the importance of not delaying software updates and regularly changing passwords to mitigate these evolving threats during a panel discussion at the university. He stressed the necessity of multi-factor authentication and swift deployment of software patches by organizations to ensure cybersecurity resilience.
Unlike traditional computer viruses, worms autonomously propagate between machines without human intervention. The AI worm developed by the University of Toronto researchers collects data as it traverses devices, exploiting vulnerabilities and weak passwords to infiltrate new targets. These worms can adapt and learn from newly discovered vulnerabilities, surpassing the pace of software updates designed to thwart them.
Papernot underscored that these AI-driven worms are not only more sophisticated but also cost-effective to develop and deploy compared to their predecessors. This cost efficiency enables hackers to expand their target base, posing a significant challenge to cybersecurity defense strategies.
A survey by the Communications Security Establishment in January revealed that while a majority of respondents regularly update their device software and use complex passwords, there is still a lack of consistent use of unique passwords. Papernot highlighted the urgent need to strengthen cybersecurity measures in critical sectors such as power grids, healthcare facilities, and essential services given their exposure to online threats.
The landscape of cybersecurity is evolving rapidly, necessitating proactive steps from individuals and organizations to safeguard against the escalating threat posed by AI-driven cyber-worms.
(Source: CBC News)