ladies and gentlemen data is the new
gold we are becoming more and more
involved with it in our daily lives
whether it be the Internet of Things
self-driving Cars Smart AI or even the
up and cominging neuralink all of them
rely on the flow of data to operate with
increasing Reliance on data to drive
day-to-day operations this begs the
question how do we know that all of this
data is secure and safe from the hands
of hackers
this is a question that goes mostly
unanswered and will be the main focus of
my talk today with cyber attacks and
data breaches escalating exponentially
in size and severity neglecting cyber
security is an issue that empowers
hackers Beyond anyone's wildest
imaginations and a mistake that will
cost us colossally in the long
run now in order to truly go beyond the
human in order to truly move forward as
a species we must ensure that the tools
we use to do so are safe and secure for
every everyone to
use now I would like to set the scene
I'm sure you've all seen the advanced AI
models and their magical capabilities uh
open AI uh chat GPT Google's B github's
co-pilot you name it you some of you
might have even used it to increase your
productivity tenfolds ladies and
gentlemen what if I told you that you
were not the only people using these to
increase your
productivity as it stands like a dog is
a man's best friend AI is a hacker's
best friend and it proves a surprisingly
capable assistant in manipulating both
the human and the
computer now this brings me to my first
point which is ai's ability to write
malware and exploit code now while AI
models are centuries even Millennia away
from actually replacing programmers
that's not to say that they aren't
efficient at writing code namely
dangerous code that can be used against
internet infrastructure and systems
worldwide to prove prove my point I
asked a nondescript AI to write me
malware now disclaimers do not under any
circumstances do this this is for
educational purposes only that being
said this is its response and here is
what it
returned Now ladies and gentlemen this
right here is a polymorphic
self-encrypting virus what this virus
does for those of you who are unfamiliar
with computer terminology is it is a
virus that can change its appearance at
will which makes it very very difficult
to track and basically makes it go
undetected by most antivirus Solutions
today now keep in mind ladies and
gentlemen that this was created in
seconds by a board high schooler imagine
what a hacker with more Ingenuity and
more time on their hands can do is this
terrifying you yet it gets
worse consider the fact that most
companies nowadays neglect cyber
security yes even the major ones for for
example Toyota in May 2023 released
released the fact that they had been the
victim of a decade long data breach
which compromised millions of user
accounts with cyber attacks increasing
rampantly and becoming much more Savage
and companies stagnating and refusing to
improve their cyber policies this stands
to lead to a cataclysm ladies and
gentlemen in which your data is the
victim
now the intrinsic value of AI to a
hacker is not in its ability to write
bad code it is actually in its ability
to manipulate people social engineering
is a class of attack that is becoming
increasingly more prevalent with 41% of
major breaches happening due to uh this
type of attack now it it is an attack
which involves a hacker manipulating a
human and coercing them into try uh into
doing their
bidding so AI can also help with this in
a very very efficient manner now now
let's take a look at this from the hands
of a hacker right so here is our victim
John Doe so we want is Bank details the
first step is we basically compile a
list of public information so we found
online via social media and other forums
that he's 23 he's Junior analyst uh he's
a bit of a hustler and he's kind of
struggling with his finances so we Ed
this and feed it to this AI model once
again non descript for legal reasons and
it returns a very very efficient very
very convincing script over here which
is sent which would be sent in an email
to him which would get him to click on a
mips link now this uh email prompt uses
time urgency and consequences introduces
consequences in order to get him to
click on a link now Ladi and gentlemen
you might think that oh yeah this is
just a simple scam email I won't fall
for this well I have two things is safe
to that both of them indicate that you
are wrong first off it is becoming
increasingly harder for people to tell
the difference between AI generated
content and real content and second off
a 2021 study conducted by it firm AAG
looked into fishing attacks and found
that the success rate jumped from 18% to
51% when the attacks were personalized
like we did here now ladies and
gentlemen that is a coin toss
probability do you want the Integrity of
your
data reliant on a coin
TOS now some of you might roll your eyes
At The Mention of your data think it's
completely different completely separate
from who you are as a person and think
it has no bearing on your life well
let's contextualize this ladies and
Gentlemen let's play a game raise your
hands if you have bought something
online at any point in
time raise your hands if you have
private documents on your computer or if
youve done something private
online
raise your hands ladies and gentlemen if
you have a smart device such as an
Amazon Alexa or Google home sitting in
your house right
now the majority of you said yes ladies
and gentlemen all this data act as
strings to which a sufficiently skilled
hacker can control you like a puppet as
a result security of your data
matters now we've kind of looked at how
exactly hackers can use modern
Technologies to kind of uh you know
Havoc start chaos but one thing I think
that is even more important is how do we
fight back Where Do We Go From Here
simple We Fight Fire with Fire so you
can use these AI generative models as
well to uh read Kafkaesque absurdly long
terms and conditions to actually make
informed decisions based on how the
companies how companies handle your data
this is a very efficient tool as it
allows you to get to what matters most
Furthermore with the rise of social
engineering ing attacks you can also use
generative AI to detect these social
engineering attacks as these models are
very efficient at detecting what they
have generated
furthermore if you are a programmer you
can also use generative AI to write
mundane boilerplate code in templates so
you can focus on the bigger picture as a
whole uh you know system security
scalability and efficiency all of this
combines to make a very very very robust
cyber strategy and secure your data
pretty efficiently Now ladies and
gentlemen as I've said before in order
to truly go beyond the human cyber
security must be considered in order it
is something that is beyond every single
one of us and it is something that we
are all responsible for in order to
usher in a new age we must make sure
that the tools used to do so are safe
thank you ladies and
[Applause]
gentlemen
