Artificial intelligence experts are cautioning the public to ensure strong passwords and timely software updates on their devices to counteract the emergence of “AI-driven computer worms,” a new form of cyber threat that can carry out customized attacks on devices, draining processing capabilities and data while seeking out new targets.
Recently, a team from the University of Toronto, led by Nicolas Papernot, the Canadian Institute for Advanced Research AI chair, unveiled that publicly accessible AI models could fuel a worm with the ability to adjust its attack strategy in real-time as it spreads across internet-connected devices like laptops, printers, and cameras.
This research, in partnership with the Vector Institute, was shared with key national security and defense organizations before its public disclosure. Papernot, an associate professor at U of T specializing in computer engineering and computer science, emphasized the importance of promptly updating software and regularly changing passwords during a panel discussion at the university.
Unlike conventional computer viruses, worms propagate from one machine to another without human intervention. The worm developed by the U of T team collects data as it navigates between devices, exploiting newly discovered vulnerabilities and weak passwords to advance its reach.
In an unregulated environment, such a worm could access the internet, learning from alerts about fresh vulnerabilities faster than software updates can be deployed to counter them. The researchers highlighted that while some issues can be addressed through software updates, others such as weak passwords and inadequate IT configurations require human intervention and cannot be fixed solely by patches.
Papernot emphasized that these AI-driven worms can craft tailored attack strategies for each victim device they encounter. Unlike past attacks that relied on fixed scripts, these AI-powered worms can adapt and learn from interactions with devices, making them more challenging to combat. Papernot warned that stopping their spread is not as straightforward as fixing a single vulnerability.
The rise of AI-driven worms poses a significant shift in cybersecurity risks, as they are not only more effective than previous threats but also cheaper to develop and unleash. The lower costs associated with deploying these worms could enable hackers to target a larger number of victims.
A survey conducted by the Communications Security Establishment (CSE) in January revealed that while a significant portion of respondents regularly update their software and use complex passwords, there is room for improvement in cybersecurity practices in Canada. Papernot stressed the importance of enhancing cybersecurity measures, particularly for critical infrastructure exposed to the internet.
The implications of AI-driven cyber threats have raised concerns among experts and researchers, underscoring the need for vigilance and proactive cybersecurity measures to mitigate potential risks.