#AIsecurity

[mark-matos]

The Risks of ChatGPT Hacking: A Growing Concern in AI Security

As AI systems like ChatGPT become more widespread, security concerns emerge. Researchers like Alex Polyakov of Adversa AI are finding ways to "jailbreak" these systems, bypassing safety rules and potentially causing havoc across the web. With AI models being implemented at scale, it's vital to understand the possible dangers and take preventive measures.

Polyakov managed to bypass OpenAI's safety systems by crafting prompts that encouraged GPT-4 to produce harmful content. This highlights the potential risks of AI systems being manipulated to produce malicious or illegal content. As AI becomes more ingrained in our everyday lives, it's essential to consider the ethical implications and security challenges they present.

One significant concern is the possibility of prompt injection attacks. These can silently insert malicious data or instructions into AI models, with potentially disastrous consequences. Arvind Narayanan, a computer science professor at Princeton University, warns of the potential for AI-based personal assistants to be exploited, resulting in widespread security breaches.

AI personal assistants have become a popular technology in recent years, offering users the ability to automate tasks and access information quickly and easily. However, as with any technology, there is a risk of exploitation. If an AI personal assistant is not properly secured, it could potentially be hacked or used to gather personal information without the user's consent. Additionally, there is the risk of cybercriminals using AI assistants to launch attacks, such as phishing attempts or malware installation. To prevent exploitation, it is important for developers to implement strong security measures when creating AI personal assistants. This includes encrypting data, limiting access to sensitive information, and regularly updating security protocols. Users can also take steps to protect their personal information, such as using strong passwords and being cautious of suspicious messages or requests. Overall, while AI personal assistants offer many benefits, it is important to be aware of the potential risks and take appropriate precautions to prevent exploitation.

To protect against these threats, researchers and developers must prioritize security in AI systems. Regular updates and constant vigilance against jailbreaks are essential. AI systems must also be designed with a strong ethical framework to minimize the potential for misuse.

As we embrace the benefits of AI technology, let's not forget the potential risks and work together to ensure a safe and secure AI-driven future.

About Mark Matos

Mark Matos Blog

[govindhtech]

IBM Guardium Data Security Center Boosts AI & Quantum Safety

Introducing IBM Guardium Data Security Center

Using a unified experience, protect your data from both present and future threats, such as cryptography and artificial intelligence assaults.

IBM is unveiling IBM Guardium Data Security Center, which enables enterprises to protect data in any environment, during its full lifespan, and with unified controls, as concerns connected to hybrid clouds, artificial intelligence, and quantum technology upend the conventional data security paradigm.

To assist you in managing the data security lifecycle, from discovery to remediation, for all data types and across all data environments, IBM Guardium Data Security Center provides five modules. In the face of changing requirements, it enables security teams throughout the company to work together to manage data risks and vulnerabilities.

Why Guardium Data Security Center?

Dismantle organizational silos by giving security teams the tools they need to work together across the board using unified compliance regulations, connected procedures, and a shared perspective of data assets.

Safeguard both structured and unstructured data on-premises and in the cloud.

Oversee the whole data security lifecycle, from detection to repair.

Encourage security teams to work together by providing an open ecosystem and integrated workflows.

Protect your digital transformation

Continuously evaluate threats and weaknesses with automated real-time alerts. Automated discovery and classification, unified dashboards and reporting, vulnerability management, tracking, and workflow management are examples of shared platform experiences that help you safeguard your data while growing your company.

Security teams can integrate workflows and handle data monitoring and governance, data detection and response, data and AI security posture management, and cryptography management all from a single dashboard with IBM Guardium Data Security Center’s shared view of an organization’s data assets. Generative AI features in IBM Guardium Data Security Center can help create risk summaries and increase the efficiency of security professionals.

IBM Guardium AI Security

At a time when generative AI usage is on the rise and the possibility of “shadow AI,” or the existence of unapproved models, is increasing, the center offers IBM Guardium AI Security, software that helps shield enterprises’ AI deployments from security flaws and violations of data governance policies.

Control the danger to the security of private AI data and models.

Use IBM Guardium AI Security to continuously find and address vulnerabilities in AI data, models, and application usage.

Guardium AI Security assists businesses in:

Obtain ongoing, automated monitoring for AI implementations.

Find configuration errors and security flaws

Control how users, models, data, and apps interact with security.

This component of IBM Guardium Data Security Center enables cross-organization collaboration between security and AI teams through unified compliance policies, a shared view of data assets, and integrated workflows.

Advantages

Learn about shadow AI and gain complete insight into AI implementations

The Guardium the AI model linked to each deployment is made public by AI Security. It reveals the data, model, and application utilization of every AI deployment. All of the applications that access the model will also be visible to you.

Determine which high-risk vulnerabilities need to be fixed

You can see the weaknesses in your model, the data that underlies it, and the apps that use it. You can prioritize your next steps by assigning a criticality value to each vulnerability. The list of vulnerabilities is easily exportable for reporting.

Adapt to evaluation frameworks and adhere to legal requirements

You can handle compliance concerns with AI models and data and manage security risk with the aid of Guardium AI Security. Assessment frameworks, like OWASP Top 10 for LLM, are mapped to vulnerabilities so that you can quickly understand more about the risks that have been detected and the controls that need to be put in place to mitigate them.

Qualities

Continuous and automated monitoring for AI implementations

Assist companies in gaining complete insight into AI implementations so they can identify shadow AI.

Find configuration errors and security flaws

Determine which high-risk vulnerabilities need to be fixed and relate them to evaluation frameworks like the OWASP Top 10 for LLM.

Keep an eye on AI compliance

Learn about AI implementations and how users, models, data, and apps interact. IBM Watsonx.governance is included preinstalled.

IBM Guardium Quantum Safe

Become aware of your cryptographic posture. Evaluate and rank cryptographic flaws to protect your important data.

IBM Guardium Quantum Safe, a program that assists customers in safeguarding encrypted data from future cyberattacks by malevolent actors with access to quantum computers with cryptographic implications, is another element of IBM Guardium Data Security Center. IBM Research, which includes IBM’s post-quantum cryptography techniques, and IBM Consulting have contributed to the development of IBM Guardium Quantum Safe.

Sensitive information could soon be exposed if traditional encryption techniques are “broken.”

Every business transaction is built on the foundation of data security. For decades, businesses have depended on common cryptography and encryption techniques to protect their data, apps, and endpoints. With quantum computing, old encryption schemes that would take years to crack on a traditional computer may be cracked in hours. All sensitive data protected by current encryption standards and procedures may become exposed as quantum computing develops.

IBM is a leader in the quantum safe field, having worked with industry partners to produce two newly published NIST post-quantum cryptography standards. IBM Guardium Quantum Safe, which is available on IBM Guardium Data Security Center, keeps an eye on how your company uses cryptography, identifies cryptographic flaws, and ranks remediation in order to protect your data from both traditional and quantum-enabled threats.

Advantages

All-encompassing, combined visibility

Get better insight into the cryptographic posture, vulnerabilities, and remediation status of your company.

Quicker adherence

In addition to integrating with enterprise issue-tracking systems, users can create and implement policies based on external regulations and internal security policies.

Planning for cleanup more quickly

Prioritizing risks gives you the information you need to create a remediation map that works fast.

Characteristics

Visualization

Get insight into how cryptography is being used throughout the company, then delve deeper to assess the security posture of cryptography.

Keeping an eye on and tracking

Track and evaluate policy infractions and corrections over time with ease.

Prioritizing vulnerabilities

Rapidly learn the priority of vulnerabilities based on non-compliance and commercial effect.

Actions motivated by policy

Integrate with IT issue-tracking systems to manage policy breaches that have been defined by the user and expedite the remedy process.

Organizations must increase their crypto-agility and closely monitor their AI models, training data, and usage during this revolutionary period. With its AI Security, Quantum Safe, and other integrated features, IBM Guardium Data Security Center offers thorough risk visibility.

In order to identify vulnerabilities and direct remediation, IBM Guardium Quantum Safe assists enterprises in managing their enterprise cryptographic security posture and gaining visibility. By combining crypto algorithms used in code, vulnerabilities found in code, and network usages into a single dashboard, it enables organizations to enforce policies based on external, internal, and governmental regulations. This eliminates the need for security analysts to piece together data dispersed across multiple systems, tools, and departments in order to monitor policy violations and track progress. Guardium Quantum Safe provides flexible reporting and configurable metadata to prioritize fixing serious vulnerabilities.

For sensitive AI data and AI models, IBM Guardium AI Security handles data governance and security risk. Through a shared perspective of data assets, it assists in identifying AI deployments, addressing compliance, mitigating risks, and safeguarding sensitive data in AI models. IBM Watsonx and other generative AI software as a service providers are integrated with IBM Guardium AI Security. To ensure that “shadow AI” models no longer elude governance, IBM Guardium AI Security, for instance, assists in the discovery of these models and subsequently shares them with IBM Watsonx.governance.

An integrated strategy for a period of transformation

Risks associated with the hybrid cloud, artificial intelligence, and quantum era necessitate new methods of protecting sensitive data, including financial transactions, medical information, intellectual property, and vital infrastructure. Organizations desperately need a reliable partner and an integrated strategy to data protection during this revolutionary period, not a patchwork of discrete solutions. This integrated strategy is being pioneered by IBM.

IBM Consulting and Research’s more comprehensive Quantum Safe products complement IBM Guardium Quantum Safe. IBM Research has produced the technology and research that powers the software. The U.S. National Institute of Standards and Technology (NIST) recently standardized a number of IBM Research’s post-quantum cryptography algorithms, which is an important step in preventing future cyberattacks by malicious actors who might obtain access to cryptographically significant quantum computers.

These technologies are used by IBM Consulting’s Quantum Safe Transformation Services to assist organizations in identifying risks, prioritizing and inventorying them, addressing them, and then scaling the process. Numerous experts in cryptography and quantum safe technologies are part of IBM Consulting’s cybersecurity team. IBM Quantum Safe Transformation Services are used by dozens of clients in the government, financial, telecommunications, and other sectors to help protect their companies from existing and future vulnerabilities, such as harvest now, decrypt later.

Additionally, IBM is expanding its Verify offering today with decentralized identity features: Users can save and manage their own credentials with IBM Verify Digital Credentials. Physical credentials such as driver’s licenses, insurance cards, loyalty cards, and employee badges are digitized by the feature so they may be standardized, saved, and shared with complete control, privacy protection, and security. Identity protection throughout the hybrid cloud is provided by IBM Verify, an IAM (identity access management) service.

Statements on IBM’s future direction and intent are merely goals and objectives and are subject to change or withdrawal at any time.

Read more on govindhtech.com

[jpmellojr]

AI and cybersecurity: Modernize your SecOps to tackle today's threats

The introduction of AI has triggered a profound transformation in the landscape of offensive security. https://jpmellojr.blogspot.com/2024/10/how-ai-is-becoming-powerful-tool-for.html

[impact-newswire]

Protect AI Selected Top Cyber Company in 2024 Enterprise Security Tech Awards - The leading artificial intelligence (AI)

@ProtectAI

[ymaprotech]

HONOR Magic6 Pro:- Everything You Need To Know About HONOR's AI-Powered Phone || YMA PRO TECH

HONOR, the leading global technology brand, has recently unveiled its latest cutting-edge smartphone, powered by advanced artificial intelligence (AI) capabilities. With this AI-powered phone, HONOR aims to revolutionize the way we interact with our devices and redefine the mobile experience.

Powerful AI Processing Intelligent Camera System AI-Assisted User Experience AI-Powered Battery Optimization AI-Enhanced Security AI-Powered Gaming Experience AI-Driven Productivity Tools Seamless Connectivity and Smart Home Integration Continuous Learning and Updates Innovative Design and Display

[thxnews]

UK Doubles Down on Cyber Defenses with Skills Push

During a keynote address at the CyberUK 2024 conference in Birmingham, Tech Minister Saqib Bhatti unveiled the UK government's latest initiatives to fortify the nation's cyber resilience and defend against mounting digital threats. The multi-faceted strategy involves leveraging cutting-edge technologies like AI, instituting stringent security codes for software vendors and developers, and building a world-class cyber workforce through professional certifications and skills training. Addressing one of the core cybersecurity challenges, Bhatti emphasized the government's "secure by design" approach to ensure new technologies have security embedded from the ground up. He cited recent consumer IoT device laws that mandate robust default passwords, stated vulnerability disclosure policies, and minimum update periods as an example of UK leadership driving global tech policy.  

Ethical-ai graphics. Artwork by i-Pro.  

New Codes to Govern Software and AI Security

Two new codes of practice published on gov.uk today double down on this security-first philosophy: The Software Vendor Code sets principles for secure software development lifecycles, controlled build environments, secure deployment practices, and transparent communication through supply chains - aiming to prevent repeats of attacks like those crippling the BBC, British Airways and NHS systems. The AI Cyber Security Code provides guardrails for developing AI applications resilient against hacking, tampering or manipulation, forming the basis for an international standard built on NCSC guidelines.   "Getting this right is crucial for the future security and resilience of our tech ecosystem," Bhatti stressed. "We're really keen to have industry feedback on strengthening these codes."   Credentials and Skills to Raise the Bar Beyond technical baselines, the Minister outlined strategic levers to improve Britain's overall cyber posture through upskilling the workforce and mandating security standards. Highlighting new statistics showing Cyber Essentials-certified firms face 92% fewer cyber insurance claims, he bluntly stated "Cyber Essentials works" and called for mass adoption of the scheme's risk-reducing practices.  

Cyber Suffragettes at Pankhurst Centre Zebra Hub Wiki Edit a thon. Photo by Wiki Zebra Carol. Wikimedia.  

Standardizing the Cyber Workforce

On the human capital front, a new "professional titles" program developed jointly with the UK Cyber Security Council will provide portable, recognized accreditation defining clear career pathways and competencies for cybersecurity practitioners. A public statement published alongside Bhatti's speech formalizes commitments from government bodies, regulators and techUK members to incorporate these professional certifications into hiring and workforce development by 2025.   Scaling Up Youth Cyber Training Bhatti also revealed plans to significantly expand the successful CyberFirst program which has already reached over 260,000 students across 2,500 UK schools since 2016 with hands-on cybersecurity skills training. The forthcoming public consultation will explore options like spinning off delivery into a new independent organization dedicated to rapidly growing the initiative's impact as a talent pipeline for the field.  

Coordinated Economic Defense

Underscoring the collaborative "whole-of-nation" approach mandated by the National Cyber Strategy, the Minister highlighted parallel efforts raising baseline security requirements across all sectors through regulatory updates, public-private partnerships and coordinated risk management. "The cyber threat isn't just hitting our national security - it's impacting our entire economy," Bhatti warned bluntly. "These malicious actors cannot be allowed to prevail. By working hand-in-glove with our industry partners, we will ensure Britain's economy remains secure, resilient and fit for Cloud Age innovation."   This includes the looming expansion of the NIS Regulations to cover managed services providers, continued collaboration between tech firms and U.K. cyber authorities like NCSC and NCSC-certified penetration testing under the evolving CBEST framework. Cooperation with financial regulators and the Bank of England on sector-specific resilience efforts is also increasing.  

Royal Anglian Regiment Parade observed by Stephen McPartland MP. Photo by Peter O'Connor. Flickr.  

Nurturing the UK's Cybersecurity Powerhouse

With the cybersecurity industry now viewed as an engine for economic growth, the government aims to nurture the UK's burgeoning £11.9 billion cyber sector which already employs over 60,000 nationwide according to new figures. An upcoming independent review by MP Stephen McPartland will further detail how proactive cyber policies can drive job creation, investment and innovation across the nation's digital economy. As cyber threats proliferate from individual hackers to hostile nation-states, the UK is rapidly building a comprehensive defensive posture spanning technology, policy, workforce development and lockstep public-private coordination. People and businesses are encouraged to monitor the National Cyber Security Centre for the latest guidance as these new resilience initiatives take shape.   Sources: THX News, Department for Science, Innovation and Technology, National Cyber Security Centre, FCA, House of Commons Library, Bank of England & Saqib Bhatti MP. Read the full article

[scopethings-blog]

Scope Computers

Artificial Intelligence (Join Now) Contact us: 88560000535

Artificial intelligence (AI) refers to the simulation of human intelligence processes by computer systems. These processes include learning (the acquisition of information and rules for using the information), reasoning (using rules to reach approximate or definite conclusions), and self-correction. AI encompasses various subfields such as machine learning, natural language processing, computer vision, robotics, and expert systems.

Machine learning, a subset of AI, focuses on the development of algorithms that enable computers to learn from and make predictions or decisions based on data. Natural language processing (NLP) involves the interaction between computers and humans using natural language. Computer vision deals with enabling computers to interpret and understand the visual world, often through image or video analysis. Robotics combines AI with mechanical engineering to create intelligent machines capable of performing tasks autonomously.

AI systems can be classified as either narrow AI or general AI. Narrow AI, also known as weak AI, is designed to perform a narrow task, such as facial recognition or language translation. General AI, also referred to as strong AI or artificial general intelligence (AGI), would have the ability to understand, learn, and apply knowledge across different domains, similar to human intelligence.

AI technologies have a wide range of applications across various industries, including healthcare, finance, transportation, entertainment, and more. While AI offers tremendous potential benefits, it also raises ethical and societal concerns, such as job displacement, privacy issues, bias in algorithms, and the potential for misuse. Therefore, the development and deployment of AI systems require careful consideration of these implications.

[seccamsla]

🔐 Elevate Your Security with Digital Surveillance CCTV: Harnessing the Power of Artificial Intelligence! 🔐

Dear Los Angeles Community,

Are you ready to embrace the future of security? At Digital Surveillance CCTV Installers, we're revolutionizing the way you protect your home and loved ones with cutting-edge Artificial Intelligence (AI) technology integrated into our security camera systems.

Here's how AI is transforming modern security camera systems:

Smart Detection: Our AI-powered cameras are equipped with advanced algorithms that can differentiate between ordinary movements and suspicious activities. Whether it's a trespasser, a package thief, or a stray animal, our cameras can instantly detect and alert you in real-time.

Behavior Analysis: Traditional security cameras simply record footage. However, our AI-enabled systems go beyond by analyzing behaviors. They can recognize patterns, such as frequent visitors or unusual activities, allowing for proactive intervention before any potential threat escalates.

Facial Recognition: Say goodbye to the days of relying solely on blurry footage. Our security cameras utilize facial recognition technology to identify known individuals, enhancing security and enabling efficient access control measures.

Predictive Insights: By analyzing vast amounts of data, our AI algorithms can provide predictive insights into potential security risks. From identifying vulnerable areas to recommending optimal camera placements, our systems empower you to stay one step ahead of potential threats.

At Digital Surveillance CCTV Installers, we're committed to staying at the forefront of security innovation. Our team of experts will work closely with you to design and install a customized AI-powered security solution tailored to your unique needs.

Embrace the future of security with Digital Surveillance CCTV Installers and experience peace of mind like never before!

Get in touch with us: 310 901 4972 Email us: seccamsla@gmail.com

[luxlaff]

Unveiling AI's Achilles' Heel: The Critical Battle Against Adversarial Attacks

In recent developments that have sent ripples through the tech community, a concerning level of vulnerability in AI networks to malicious attacks has been uncovered. This discovery suggests that AI systems are far more susceptible to manipulation than previously believed, posing significant risks, particularly in applications where safety and accuracy are critical. The revelation comes from a series of studies focused on adversarial attacks, a method where attackers subtly manipulate data inputs to confuse AI systems, causing them to make incorrect decisions or take erroneous actions.

Understanding the Threat: Adversarial Attacks

Adversarial attacks operate by making minor modifications to inputs that AI systems are designed to interpret. For instance, slight alterations to a stop sign could render it unrecognized by an AI system responsible for autonomous vehicle navigation, or subtle changes to medical imaging might result in inaccurate diagnoses by AI-driven diagnostic tools. This vulnerability not only highlights the fragility of AI networks but also underscores the potential dangers they pose in environments where precision is non-negotiable.

QuadAttacK: A Tool for Exposing Vulnerabilities

At the heart of this research is a tool named QuadAttacK, designed to probe the vulnerabilities of four widely-used deep neural networks. The findings were alarming, with each of these networks demonstrating significant susceptibility to adversarial manipulations. The introduction of QuadAttacK to the public domain now allows for broader research and testing on AI network vulnerabilities, paving the way for enhancing their security against malicious interventions.

The Imperative for Robust Cybersecurity Measures

These revelations underscore the urgent need for advanced cybersecurity measures within AI systems. Protecting AI networks from such vulnerabilities is not just a technical challenge but a critical safety imperative, especially in sectors like healthcare and transportation, where the stakes are high. The goal is to fortify AI systems against the ingenuity of cyber threats, ensuring they remain reliable under all circumstances.

The Road Ahead: Securing AI Systems

The discovery of AI networks' vulnerability to adversarial attacks serves as a wake-up call to the AI research community and industry practitioners. It brings to light the importance of integrating robust cybersecurity frameworks from the early stages of AI system development. Moreover, it highlights the need for continuous vigilance and adaptive security protocols to safeguard these technologies against evolving cyber threats.

In conclusion, while AI systems offer transformative potentials across various sectors, their susceptibility to adversarial attacks poses significant challenges. The advent of tools like QuadAttacK represents a critical step towards understanding and mitigating these vulnerabilities. Moving forward, the emphasis must be on developing and implementing comprehensive cybersecurity measures to protect AI systems, ensuring they can be trusted to perform safely and accurately in all applications.

[joshtechadvisory]

Malware (also known as malicious software) is a fraudulent code that is injected into a user’s computer to steal and corrupt sensitive information. This can lead to a ransom attack where the perpetrator agrees to give back the information in exchange for a demanding ransom.

Read More : https://joshsoftware.com/blogs/the-helping-hand-of-ai-in-cybersecurity/

[osintelligence]

https://bit.ly/3saXhuD - 🖼 A new tool, Nightshade, allows artists to alter pixels within their art. If this art is incorporated into an AI training set, the AI model may malfunction in unpredictable ways. The motive is to deter AI companies from using artworks without artists' permissions. The outcome could be, for instance, image-generating AI models producing erroneous outputs, such as turning dogs into cats. #Nightshade #AI #ArtistsRights 📢 Several AI firms like OpenAI, Meta, and Google face legal challenges from artists claiming their works were used without consent. Nightshade, developed under the guidance of Professor Ben Zhao, is seen as a means to give power back to artists by serving as a deterrent against copyright infringement. Neither Meta, Google, Stability AI, nor OpenAI commented on their potential reactions to this tool. #OpenAI #Meta #Google #Copyright 🔒 Alongside Nightshade, Zhao's team also created Glaze. This allows artists to mask their unique style to avoid detection by AI scraping tools. Soon, Nightshade will be integrated into Glaze, and it's set to become open source. The more artists use these tools, the stronger they become, potentially damaging large AI models. #Glaze #OpenSource #AISecurity 🎯 Focusing on the mechanism, Nightshade exploits a weakness in generative AI models which train on vast data sets. By poisoning art data, for instance, an AI might confuse hats with cakes. Removing these corrupted data points is challenging. Experiments showed that with a few hundred poisoned images, AI outputs become significantly distorted. #DataPoisoning #AIModel 🔗 The influence of Nightshade isn't limited to direct keywords. If the AI is trained on a corrupted image labeled as “fantasy art,” related terms such as “dragon” or “Lord of the Rings castle” could also generate skewed outputs. #AIInfluence #KeywordAssociation ⚠️ While Nightshade could be a potent tool for artists, Zhao acknowledges potential misuse. Corrupting larger AI models would require thousands of tainted samples. Experts like Professor Vitaly Shmatikov emphasize that defenses against such attacks are vital. Gautam Kamath praised the research, noting it highlights vulnerabilities in AI models. #AIAbuse #ModelVulnerability 🤝 Nightshade may push AI companies to recognize artists' rights better, potentially leading to increased royalty payments. While some AI firms allow artists to opt out of training models, artists argue this isn't sufficient. Tools like Nightshade and Glaze might restore some power to artists, giving them confidence to showcase their art online without fear.

[opticvyu]

Monitor construction vehicles, track worker activity, and mitigate safety hazards at your construction site with OpticVyu AI-based image processing construction monitoring solution.

Learn more:- https://bit.ly/3hDjlZF

[govindhtech]

AIxCC, To Protect Nation’s Most Important Software

DARPA AI cyber challenge

Among the most obvious advantages of artificial intelligence (AI) is its capacity to improve cybersecurity for businesses and global internet users. This is particularly true since malicious actors are still focussing on and taking advantage of vital software and systems. These dynamics will change as  artificial intelligence develops, and if used properly,  AI may help move the sector towards a more secure architecture for the digital age.

Experience also teaches us that, in order to get there, there must be strong public-private sector partnerships and innovative possibilities such as DARPA’s AI Cyber Challenge (AIxCC) Semifinal Competition event, which will take place from August 8–11 at DEF CON 32 in Las Vegas. Researchers in cybersecurity and AI get together for this two-year challenge to create new AI tools that will aid in the security of significant open-source projects.

This competition is the first iteration of the challenge that DARPA AIxCC unveiled at Black Hat last year. Following the White House’s voluntary AI commitments, which saw business and government unite to promote ethical methods in AI development and application, is the Semifinal Competition. Today, we’re going to discuss how Google is assisting rivals in the AIxCC:

Google  Cloud resources: Up to $1 million in Google Cloud credits will be awarded by Google to each qualifying AIxCC team, in an effort to position rivals for success. The credits can be redeemed by participants for Gemini and other qualified Google Cloud services. As a result, during the challenge, competitors will have access to Google Cloud AI and machine learning models, which they can utilise and expand upon for a variety of purposes. Google is urge participants to benefit from Google incentive schemes, such as the Google for firms Program, which reimburses up to $350,000 in Google Cloud expenses for AI firms.

Experts in cybersecurity: For years, Google has been in the forefront of utilising AI in security, whether it is for sophisticated threat detection or shielding Gmail users from phishing scams. Google excited to share knowledge with AIxCC by making security specialists available throughout the challenge, they have witnessed the promise of AI for security. Google security specialists will be available to offer guidance on infrastructure and projects as well as assist in creating the standards by which competitors will be judged. Specifically, Google discuss recommended approaches to AIxCC in Google tutorial on how AI may improve Google’s open source OSS-Fuzz technology.

Experience AIxCC at DEF CON: We’ll be showcasing Google’s AI technology next week at the AIxCC Semifinal Experience at DEF CON, complete with an AI-focused hacker demo and interactive demonstrations. In order to demonstrate AI technologies, which includes Google Security Operations and SecLM, Google will also have Chromebooks at the Google exhibit. Google security specialists will be available to guests to engage in technical conversations and impart information.

AI Cyber Challenge DARPA

At Black Hat USA 2023, DARPA invited top computer scientists,  AI experts, software engineers, and others to attend the AI Cyber Challenge (AIxCC). The two-year challenge encourages AI-cybersecurity innovation to create new tools.

Software powers everything in Google ever-connected society, from public utilities to financial institutions. Software increases productivity and makes life easier for people nowadays, but it also gives bad actors a larger area to attack.

This surface includes vital infrastructure, which is particularly susceptible to cyberattacks, according to DARPA specialists, because there aren’t enough technologies to adequately secure systems on a large scale. Cyber defenders face a formidable attack surface, which has been evident in recent years as malevolent cyber actors take advantage of this state of affairs to pose risks to society. Notwithstanding these weaknesses, contemporary technological advancements might offer a way around them.

AIxCC DARPA

According to Perri Adams, DARPA’s AIxCC program manager, “AIxCC represents a first-of-its-kind collaboration between top AI companies, led by DARPA to create AI-driven systems to help address one of society’s biggest issue: cybersecurity.” Over the past decade, exciting AI-enabled capabilities have emerged. DARPA see a lot of potential for this technology to be used to important cybersecurity challenges when handled appropriately. DARPA can have the most influence on cybersecurity in the nation and the world by automatically safeguarding essential software at scale.Image credit to DARPA

Participation at AIxCC will be available on two tracks: the Funded Track and the Open Track. Competitors in the Funded Track will be chosen from submissions made in response to a request for proposals for Small Business Innovation Research. Funding for up to seven small enterprises to take part will be provided. Through the competition website, Open Track contestants will register with DARPA; they will not receive funds from DARPA.

During the semifinal phase, teams on all tracks will compete in a qualifying event where the best scoring teams (up to 20) will be invited to the semifinal tournament. The top five scoring teams from these will advance to the competition’s final stage and win cash prizes. Additional cash awards will be given to the top three contestants in the final competition.

DARPA AIxCC

Leading AI businesses come together at DARPA AIxCC, where they will collaborate with DARPA to make their state-of-the-art technology and knowledge available to rivals. DARPA will work with Anthropic, Google, Microsoft, and Open AI to allow rivals to create cutting-edge a cybersecurity solutions.

As part of the Linux Foundation, the Open Source Security Foundation (OpenSSF) will act as a challenge advisor to help teams develop AI systems that can tackle important cybersecurity problems, like the safety of a crucial infrastructure and software supply chains. The majority of software, and therefore the majority of the code that requires security, is open-source and frequently created by volunteers in the community. Approximately 80% of contemporary software stacks, which include everything from phones and cars to electricity grids, manufacturing facilities, etc., use open-source software, according to the Linux Foundation.

Lastly, there will be AIxCC competitions at DEF CON and additional events at Black Hat USA. These two globally renowned cybersecurity conferences bring tens of thousands of practitioners, experts, and fans to Las Vegas every August. There will be two stages of AIxCC: the semifinal stage and the final stage. DEF CON in Las Vegas will hold 2024 and 2025 semifinals and finals.

DEF CON 32’s AI Village

Google will keep supporting the  AI Village at DEF CON, which informs attendees about security and privacy concerns related to AI, in addition to work with the AIxCC. In addition to giving the Village a $10,000 donation this year, Google will be giving workshop participants Pixel books so they can acquire practical experience with the nexus of cybersecurity and AI. After a successful red teaming event in which Google participated and security experts worked on AI security concerns, the AI Village is back this year.

Google excited to see what fresh ideas emerge from the AIxCC Semifinal Competition and to discuss how they may be used to safeguard the software that Google all use. Meanwhile, the Secure AI Framework and the recently established Coalition for Secure AI provide additional information about their efforts in the field of AI security.

Read more on govindhtech.com

[jpmellojr]

OWASP Top 10 for LLM 2.0: 3 key AppSec focus areas emerge

Following a survey of practitioners, data privacy, safety and bias, and mapping out vulnerabilities emerged as key focal points. https://jpmellojr.blogspot.com/2024/02/owasp-top-10-for-llm-20-3-key-appsec.html

[sajzath]

AI-Powered DIY Smart Cameras: The Future of Security

Imagine a world where your home security is enhanced, not by expensive security systems with complicated installations, but by smart cameras that you can easily set up yourself. Thanks to the remarkable advancements in Artificial Intelligence (AI), DIY smart cameras are becoming the future of security. In this article, we will delve into the world of AI-powered DIY smart cameras, exploring their…

[d0nutzgg]

The Rise of AI Powered Malware

AI malware is a growing concern in the world of cybersecurity. These types of malware use artificial intelligence and machine learning to evade detection and cause significant damage to individuals and organizations.

One example of AI malware is the "VPNFilter" malware, which was discovered in 2017 by researchers. This malware was able to infect routers and network-attached storage devices, and was able to evade detection by regularly changing its command-and-control servers. This made it difficult for security experts to track and remove the malware. It was later discovered that the malware was developed by a Russian state-sponsored group known as "Sandworm Team."

Another example of AI malware is the use of deepfake videos to spread malware through social media platforms. In 2018, researchers at the University of Alabama at Birmingham discovered that these types of videos could be used to bypass security measures by disguising themselves as legitimate video files. The malware was then spread through social media and messaging apps, and was being distributed by a group known as the "Turla" APT group, which is believed to be operating out of Russia.

AI-powered malware can also be used to launch DDoS attacks. For example, the Mirai botnet, which was discovered in 2016, was able to infect and control IoT devices, such as routers and security cameras, and use them to launch DDoS attacks. The botnet was able to generate massive amounts of traffic, resulting in some of the largest DDoS attacks seen to date.

The use of AI in malware is a serious threat to cybersecurity, as it can be used to launch large-scale attacks that are more difficult to detect and prevent. It's important for individuals and organizations to be aware of the potential for AI malware and to take appropriate precautions to protect themselves from these types of attacks.

For more information on AI powered malware check out chapter six in my WIP book on Wattpad "Navigating the Future: A Comprehensive Guide to Machine Learning and AI Ethics"