AI makes it less costly to attack rarer systems, said Mr Koh, citing the operational technology systems running essential services such as power plants, electrical grids and train systems, as examples.
“You typically find that these kinds of attacks are only done by very sophisticated, targeted, well-resourced agencies who have a specific reason they want to target this power plant. So typically, it’s a state attack.
“With the age of AI, these kinds of attacks become easier to do,” he said.
AI capabilities mean that the current industry standard of two to three weeks to develop a security patch for a newly discovered vulnerability may no longer be reasonable.
To respond more quickly, defenders may also need continual monitoring of computer systems, instead of relying on annual security audits.
“We need to be aware that the world is changing. How we used to organise, how we used to operate, how we used to defend ourselves cannot remain the same,” said Mr Koh.
Read Full Article At Source
