Artificial intelligence experts are cautioning the public to enhance their cybersecurity measures by using robust passwords and promptly updating software on their devices to combat the emergence of “AI-driven computer worms.” These advanced cyber threats are capable of launching customized attacks on connected devices, depleting processing power and extracting sensitive information while seeking out new targets.
A recent study by the University of Toronto, led by Nicolas Papernot, the Canadian Institute for Advanced Research AI chair, revealed that publicly available AI models can empower a worm that can dynamically adjust its attack techniques as it spreads across internet-connected devices such as laptops, printers, and cameras. The research, in collaboration with the Vector Institute, was shared with national science, security, and defense authorities before publication.
Papernot, an associate professor of computer engineering and computer science at U of T, emphasized the importance of promptly updating software and regularly changing passwords to mitigate these evolving cyber threats. He highlighted the necessity of utilizing multi-factor authentication and ensuring swift deployment of software patches by organizations to enhance cybersecurity hygiene.
Unlike traditional computer viruses, worms autonomously spread from device to device without human intervention. The AI-driven worm developed by the U of T researchers gathers information as it traverses between devices, exploiting vulnerabilities and weak points to infiltrate new targets. This worm’s ability to adapt and learn from warning notices about vulnerabilities poses a significant challenge for traditional defense mechanisms.
The researchers underscored that these AI-driven computer worms are not only more sophisticated than their predecessors but also cost-effective to build and deploy. Samir Chhabra, from Innovation, Science and Economic Development Canada, highlighted that these worms utilize stolen computing resources from victims, making subsequent attacks practically cost-free, thereby intensifying the cybersecurity risk landscape.
In light of these findings, Papernot stressed the critical need for bolstering cybersecurity measures in Canada, particularly for safeguarding critical infrastructure such as power grids, water supply systems, hospitals, and schools from potential cyber threats. The study underscores the importance of proactive cybersecurity measures, including regular software updates, strong password practices, and organizational readiness to deploy security patches swiftly.