MapleSEC webinar: AI can be used by defenders, and threat actors

Share post:

There’s no doubt threat actors are either using or will soon use artificial intelligence to build malware and craft their attacks, says an expert.

“Bad guys almost certainly are going to use AI,” Dave Masson, Ottawa-based director of enterprise security at Darktrace told this week’s IT World Canada MapleSec Satellite webinar.

“Why? The same reasons we use AI: It’s going to do the heavy work for them. Likewise, if they can take the human being out of it [their work] and have the attack driven by AI, it’s less likely to make a mistake.

“In fact it’s going to be more efficient. It’s going to allow them to carry out more attacks at a greater scale than before.”

That means, he added, if adversaries are going to use AI to attack, CISOs have to find AI-driven solutions to defend themselves. “You can’t get into an AI fight,” Masson said, “You’re not going to win.”

Asked by session host Jim Love, ITWC’s CIO, if ChatGPT is a bigger threat than AI, Masson called it “a harbinger of things to come. It can write text they can use. If you’re an attacker where English isn’t your first language, you can kiss goodbye to all those silly grammar mistakes you make that allow your phishing emails to be intercepted.”

On the other hand, Masson added, it may be possible for an AI solution to detect if the text of an email message was been generated by a human or not.

Related content: Does AI in IT operations pay off?

Artificial intelligence solutions can be used in many scenarios, he said, from discovering assets on IT networks to reacting faster than humans to quickly spreading malware.

An AI solution may be able “heal” your environment by getting it back to the condition it was in before an incident, Masson added.

Not that AI is perfect, he stressed. “It’s got to work on the data it has,” Masson said, and that data is input by humans. As the old saying goes, he said, “it’s garbage in, garbage out.” The best way AI can be used is not by trusting its responses completely, but by using it to help IT/infosec staff make decisions, he said.

“Some people say, ‘It’s AI. Should I care?’ You should care. What you shouldn’t do is worry, because this is pretty much the way we’re going. It’s all about using artificial intelligence in all its different modes and guises to support human beings.”

The next MapleSEC Satellite online series event will be held June 21.

The post MapleSEC webinar: AI can be used by defenders, and threat actors first appeared on IT World Canada.
Howard Solomon
Howard Solomon
Currently a freelance writer, I'm the former editor of and Computing Canada. An IT journalist since 1997, I've written for several of ITWC's sister publications including and Computer Dealer News. Before that I was a staff reporter at the Calgary Herald and the Brampton (Ont.) Daily Times.

Featured Tech Jobs



Related articles

Kaspersky uncovers malware targeting iPhones running iOS 15.7 and below

Kaspersky has uncovered a sophisticated malware campaign specifically designed to infect iPhones running up to iOS 15.7 through...

AI pioneer expresses regret for not prioritizing safety during AI advancement

Professor Yoshua Bengio, a well-known expert in the field of artificial intelligence, has expressed remorse to the BBC...

OpenAI introduces “Shared Links” feature for ChatGPT conversations

OpenAI has introduced "shared links" for its ChatGPT language model. This feature produces a unique URL, allowing users...

WordPress fixes critical Jetpack plugin vulnerability

WordPress has addressed a critical flaw discovered in the Jetpack plugin, which had the potential to enable authors...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways