News and Press Release

OPPORTUNITY AND CHALLENGES OF AI October 2024

AI has significantly enhanced cybersecurity by automating processes, detecting anomalies, and recognizing behaviour patterns to quickly identify threats.

The use of artificial intelligence (AI) in recent years has been largely associated with automated decision-making intended to make such process more effective and efficient. Artificial intelligence is now capable of generating and assisting in the production of original works of literary and artistic nature. For example, AI recreated Dutch painter Rembrandt van Rijn’s painting style accurately to create the Next Rembrandt which resembles the Rembrandt original, with the use of deep learning and facial recognition techniques.

It is clear that while advancements in AI technology are happening at a lightning speed, law – especially copyright law in respect of AI-generated/assisted or Generative AI (GenAI) literary and artistic works, needs some catching up to do. There exists a ‘grey area’ in copyright law with regard to its application in respect of AI-generated works. At the outset, there exists a debate on whether AI-generated works could be afforded copyright protection in the first place, and whether they belong to the public domain or not.

Let’s begin by understanding the threat landscape and the types of attacks to which your GenAI applications might be vulnerable. As AI becomes increasingly integrated into business operations, it brings with it a variety of risks. Some of the most prevalent threats include:

• Model based attacks: Common techniques include data poisoning, prompt injection attacks, or gradient based attacks
• Data Security Breaches: These risks involve data exposure, confidentiality breaches, and data loss, potentially leading to identity theft, legal issues, and significant financial and reputational harm
• AI Supply Chain Attacks: Targeting AI model development phases, these attacks can manipulate data collection and training, or plant backdoors during development and distribution
• DoS Attack on AI: Denial of Service attacks overload AI systems with traffic, disrupting service availability and effectiveness
• Social Engineering Attacks: With the rise of tools like ChatGPT, these attacks, which exploit human psychology to breach security or acquire sensitive information, have become more frequent.

The OWASP Top 10 for LLM, provides an outline the most critical cyber risk associated with deploying & managing LLM’s. This artifacts provides the right impetus to developers, designers, architects and above all Organization as a whole, the potential threat which one can encounter on the usage of LLM applications.

AI has significantly enhanced cybersecurity by automating processes, detecting anomalies, and recognizing behaviour patterns to quickly identify threats. Unlike traditional methods, AI in cybersecurity can adapt in real-time to complex threats, process large amounts of data, and reduce human error. AI solutions offer flexibility and speed, which are crucial in the rapidly evolving cyber threat landscape. AI’s real-time processing and ability to adapt to new threats provide a more dynamic and proactive approach to cybersecurity compared to traditional static models.

With the increasing use of AI for critical functions and services, there is a growing need to secure AI systems themselves. Some of the threats to AI systems include vulnerabilities captured in the OWASP Top 10 for LLM’s.

To combat some of these threats, organization need to adapt some of the best practices for protecting AI systems which includes Implement a Robust AI Security Program: Develop and maintain a comprehensive security strategy, complete with updated AI asset records and clearly designated risk management responsibilities.

• Involve Stakeholders Actively: Engage AI experts for security insights and provide specialized training to AI teams to enhance threat identification and prevention.
• Establish Advanced Technical Safeguards: Protect data integrity through encryption, enforce strict access controls, and utilize advanced monitoring tools to detect potential threats promptly.
• Conduct Regular Security Assessments: Actively perform penetration testing and vulnerability scanning to proactively identify and mitigate security risks.
• Adhere to Legal and Regulatory Standards: Stay updated with and comply with regulations like GDPR and CCPA, as well as upcoming AI regulations to ensure data privacy and user trust.
• Develop an Incident Response Protocol: Create a detailed plan for immediate action in response to security breaches, including communication strategies and remediation steps.

With the advent of AI, the CISO’s role is witnessing an unprecedented transformation. CISOs are no longer confined to the technicalities of IT security — they are adopting a strategic, holistic approach. The role now demands a deep integration of cybersecurity strategies within the broader business vision. It requires, staying ahead with technological trends, especially AI, to bolster security measures. The rise of sophisticated cyber threats like ransomware and nation state attacks calls for proactive measures. Generative AI brings new dimensions to these threats, requiring adaptive strategies.

Emphasizing a culture of security that includes people, processes, and technology. CISOs are now an integral champion in cyber risk management, crisis management, and business resilience. Generative AI offers tools to enhance team efficiency but also introduces new risks. Today’s CISO is a multifaceted leader. They are not just managing cyber security but are at the forefront of creating a resilient, AI-aware organizational culture. A culture where AI is seen as both a tool for boosting productivity but also a potential vector of attack for malicious actors. This role is dynamic, strategically important, and central to the success of modern business operations in the face of evolving cyber threats and technological advancements.

A recent survey from Splunk revealed that growing numbers of CISOs are in fact incorporating AI solutions into their work toolbox. As many as 35% of CISOs report using AI, either extensively or somewhat, for positive cybersecurity functions. Another 61% express that they either have plans to use it in the next 12 months or are interested in doing so.

The rapid change of pace for AI development has exposed a large talent gap in the workforce. While Cyber workforce challenges are not new, the rate of change may make some of the AI-related workforce gaps difficult to close, leaving most institutions entirely reliant on third parties for the development or implementation of AI systems. Investing in an AI workforce alongside the already significant IT and data requirements for AI systems may be hard for many organizations to sustain. Therefore, organization would benefit from a set of tailored best practices for less skilled practitioners around how to use AI systems. Further, the talent gap is not limited to those building and deploying AI systems. The technical competency gap also exists across the core teams managing AI risk, such as those in the legal and compliance fields. Organization & CISO’s would benefit from role-specific AI training offerings to help educate those critical enabling roles outside of Technology & Cyber. Closing this gap will be the key to the safe and effective use of AI by organization regardless of where the AI systems originate.

In Conclusion, AI presents opportunities for the organization especially Tech and BFSI, but also significant potential risks, particularly for consumers and historically marginalized groups. Applications of AI in consumer services, insurance, fraud detection, and other areas of business services have the potential to perpetuate or amplify existing inequities. Use of AI in these contexts also raises questions regarding consumer privacy and data security. The evolution of LLM-generated content and deepfake creation services are of concern to the consumer sector, especially smaller and less well-resourced institutions. These technologies not only lower the barrier to entry but also complicate authenticity verification measures. To address this concern, a more dynamic regulatory approach is essential. Regulators should shift their focus toward overseeing comprehensive risk management strategies employed by firms. This approach would ensure adherence to stringent standards and promote swift deployment of AI tools that satisfy rigorous risk criteria. Such a balanced regulatory environment is crucial for empowering institutions to harness AI’s full potential in combating sophisticated threats, without being hindered by overly restrictive oversight.

Back

CyAN MEA & India Growth Advisor Bharat Raigangar Wins Security Evangelist Award at 2024 Achievers X Awards October 2024

Huge congratulations to Bharat Raigangar, who has been honored with the prestigious Security Evangelist Award at the 2024 Achievers X Awards. This recognition celebrates Bharat’s outstanding contributions to enhancing security protocols and promoting best practices in the cybersecurity landscape.

Bharat Raigangar, a prominent figure in the cybersecurity community, has played a pivotal role in driving innovation and awareness in security measures across the region. His commitment to educating organizations about the importance of robust security frameworks has not only empowered businesses but also significantly contributed to safer digital environments.

The Achievers X Awards is a unique initiative designed to propel cities into the future by serving as a launch pad for digital transformation. This global series provides a platform for collaboration on smart governance within local digital ecosystems, allowing participants to learn from technology experts across various sectors. By connecting CXOs with tech providers and innovators—including young minds and women from different nations—the awards aim to support government and digital leaders in achieving smart city development goals.

“I am deeply honored to receive the Security Evangelist Award,” said Bharat Raigangar. “This recognition is a testament to the collaborative efforts of the entire team and our commitment to advancing security practices. Together, we can create a safer future for everyone.”

Back