Artificial intelligence experts are cautioning the public to enhance their cybersecurity practices by using robust passwords and promptly updating software on their devices to counteract the emergence of “AI-driven computer worms,” a new type of cyber-threat capable of launching tailored attacks on devices, draining computing power and harvesting data as they navigate through various connected devices such as laptops, printers, and cameras.
Researchers at the University of Toronto, led by Nicolas Papernot, the AI chair at the Canadian Institute for Advanced Research, disclosed that publicly available AI models have the potential to fuel a worm that can dynamically adjust its attack methods while spreading across internet-connected devices. The collaboration with the Vector Institute involved sharing this groundbreaking research with key national science, security, and defense entities before its public release.
Papernot, an associate professor of computer engineering and computer science at U of T, emphasized the importance of promptly updating software and regularly changing passwords to thwart potential cyber threats. He stressed the necessity of adopting multi-factor authentication and ensuring swift deployment of software patches by organizations to enhance cybersecurity measures.
In contrast to conventional computer viruses, worms autonomously spread from one machine to another without human intervention. The AI-driven worm developed by the U of T researchers gathers intelligence as it traverses between devices, exploiting vulnerabilities and weak points to compromise additional machines. The researchers highlighted that such worms could leverage internet access to learn from newly identified vulnerabilities, surpassing the effectiveness of software patches in preventing their spread.
Papernot underlined the critical need to address cybersecurity risks posed by AI-driven worms, which not only surpass their predecessors in efficiency but are also more cost-effective to construct and deploy. Samir Chhabra, the director general of marketplace framework policy at Innovation, Science, and Economic Development Canada, pointed out that the reduced costs associated with these worms would enable hackers to target a larger number of victims, as the compute resources required to execute these attacks are sourced from the compromised devices.
The Communication Security Establishment’s survey revealed that while a significant percentage of respondents regularly update their software and use complex passwords, there is room for improvement in adopting unique passwords consistently. Papernot emphasized the imperative of strengthening cybersecurity measures across critical infrastructure sectors in Canada to mitigate potential cyber threats.
The evolving landscape of cyber threats underscores the urgency for individuals and organizations to prioritize cybersecurity practices, including proactive software updates, robust password management, and continuous vigilance against emerging AI-driven threats.