Is artificial intelligence a friend, foe or frenemy? NIST wants to find out
Briefly

AI provides powerful capabilities for defenders and attackers alike, enabling faster anomaly detection, intrusion response, and automated attack scaling. NIST convened virtual working sessions to examine how AIs function, how to secure them, and how to build AI-enabled defenses. The final session focuses on how AI-empowered attacks can bypass traditional defenses and on building organizational resilience to AI-enabled threats. Common attack vectors such as phishing campaigns, data poisoning, and model inversion become easier to scale with AI, and adversaries are experimenting with agentic AI that can autonomously adapt and operate at speed.
The same tools that help defenders spot anomalies, detect intrusions and speed up response times are also making it easier for adversaries to scale and automate their attacks. AI can generate code to patch vulnerabilities, or it can exploit vulnerabilities whenever it finds them. It can help identify phishing attempts or draft realistic attacks designed to trick even the most savvy recipients.
The final session is scheduled for September 2, and this time, they are addressing the elephant in the room: how AI-empowered attacks can be used to sometimes get around traditional defenses. According to NIST, this final working session will also cover how agencies and organizations can build resilience in the face AI-enabled attacks. That concern was actually brought up in the two previous sessions, so it's certainly a concern for both government and the private sector.
Read at Nextgov.com
[
|
]