Smarter devices, smarter hackers? – Smart summary

How companies can manage the security of artificial intelligence and the Internet of Things

What if your house tried to kill you?

It’s a pretty classic horror question, where video games like System Shock and Portal and movies from “Demon Seed” to “2001: A Space Odyssey” have provided a technological edge. When we give machines control of our environment, we become defenseless. What can inhuman intelligence do about it?

When we turn to the Internet of Things to help with manufacturing and utilities, monitor our homes and help us age in place, some of our concerns didn’t seem that far-fetched. The rise of artificial intelligence, especially generative artificial intelligence, has raised more worries – and not all of them are unfounded. When AI and IoT intersect, serious problems can and do arise.

HAL 9000 probably won’t be the culprit though. Hal from down the block – or across the Atlantic – poses a real threat.

AI and IoT: an explosive combination

The Internet of Things itself is a tempting target for hackers: The data This will let your home know what temperature you like or keep power grids running smoothly, and is also incredibly valuable. On a larger scale, hostile actors could take control power plants, transportation systems or hospitals, potentially endangering people’s lives. Private citizens can demand ransoms, while state actors can destroy infrastructure, as Russia allegedly did in Ukraine.

Now add AI.

Not just technology they generally increase hacking efficiency and support social engineering, but it also opens completely new attack paths for IoT. Malicious actors can “poison” a model’s training data to skew its behavior in a particular direction, introduce input that compromises the AI ​​behind the device, and capture potentially sensitive information, gaining access to the training data in model inversion attack.

In industrial IoT, complex systems and a wider attack surface mean that a single breach can cause a cascade that affects many parts of a company or community. One such attack interrupted operations at Taiwanese semiconductor production Co., costing it an estimated $255 million in revenue.

Two great flavors

Not all combinations of AI and IoT lead to plant failures and password theft. AI actually can contribute to improving cybersecurity in generaland in particular the security of IoT systems, with the constant presence and “sensing” of patterns that no human can match.

The program can process huge amounts of data, analyzing it for potential threats, such as unauthorized access attempts. If the breach is successful, the AI ​​can change encryption in real time, reacting to sensitivity and traffic, to ensure that malicious hackers don’t get what they’re looking for, even if they can intercept the files themselves.

At a more basic level, automatic updates can equip homes, businesses and other organizations with the latest protections against constantly changing vulnerabilities and tactics.

Business responsibility for artificial intelligence and IoT

As is often the case with technology, the real horror lies with humans – both those who deliberately exploit artificial intelligence and IoT for their own benefit or national interests, and those who fail to implement the necessary safeguards. Companies must develop comprehensive, proactive strategies that address potential threats before they emerge and re-evaluate them as the security landscape evolves and new software or hardware becomes available. Countries must pass laws such as EU Artificial Intelligence Actwhich focuses on data protection, accountability and other key elements of AI security.

Finally, individuals must practice good cyber hygiene by knowing and following best practices to ensure they are not the weak link.

Application

We have given machines a lot of power over our lives, and it probably won’t end anytime soon. The Internet of Things is really convenient for people and organizations, artificial intelligence can really make some processes more efficient and less expensive, and we do not give up on new technology once we start using it.

The real issue is how we can make AI and IoT secure and reliable, and that requires a lot of human ingenuity and cooperation.

Sign up for CompTIA’s FREE SmartBrief email newsletter to see the latest hot topics in education. Belongs to SmartBrief over 250 industry bulletins.