Artificial intelligence experts are cautioning individuals to use strong passwords and promptly update software on their devices to counteract the emergence of “AI-driven computer worms,” a new form of cyber-threat capable of launching customized attacks on devices, depleting processing power and data as they seek out new targets.
A recent study by a University of Toronto team, spearheaded by Canadian Institute for Advanced Research AI chair Nicolas Papernot, revealed that publicly available AI models can fuel a worm that can adjust its attack strategy on the fly as it spreads across internet-connected devices like laptops, printers, and cameras. The research, carried out in collaboration with the Vector Institute, was shared with various national science, security, and defense entities before publication.
Papernot, an associate professor of computer engineering and computer science at U of T, emphasized the importance of not disregarding or delaying software updates and advised regular password changes. He stressed the urgency for organizations to streamline processes to swiftly deploy software patches.
Unlike traditional computer viruses, worms propagate from one machine to another without human intervention. The researchers at U of T elaborated that the worm they developed in the lab collects information as it traverses between devices, exploiting each breach to uncover passwords and vulnerabilities to infiltrate additional machines.
In an uncontrolled environment, such a worm could access the internet and assimilate information from alerts about newly identified vulnerabilities, surpassing the pace of software patches intended to thwart them. Papernot warned that while some issues can be resolved with software updates, others such as weak passwords and inadequate IT configurations require more than just patch deployment to address effectively.
The advent of AI-driven computer worms signifies a significant shift in cybersecurity risk, as these worms are not only more potent than their predecessors but also more cost-effective to create and unleash. Samir Chhabra from Innovation, Science and Economic Development Canada highlighted the reduced costs associated with deploying these worms, enabling hackers to target a larger number of victims.
A survey conducted by the Communications Security Establishment (CSE), the government’s cybersecurity agency, indicated that a majority of respondents regularly update their device software and use complex passwords. However, Papernot underscored the need for enhanced cybersecurity measures in Canada, particularly concerning critical infrastructure’s exposure to cyber threats.
The findings underscore the critical need to enhance cybersecurity practices in light of evolving cyber threats posed by AI-driven worms. It is imperative for individuals and organizations to remain vigilant, update software promptly, use strong passwords, and implement multi-factor authentication to safeguard against these emerging cyber risks.
