Artificial intelligence experts are cautioning the public to prioritize strong passwords and timely software updates on their devices to combat the emerging threat of “AI-driven computer worms.” These advanced cyber-threats are capable of launching targeted attacks on devices, depleting resources and extracting data as they move between connected devices like laptops, printers, and cameras.
Recently, a team from the University of Toronto, led by Nicolas Papernot, demonstrated that publicly available AI models can power a highly adaptive worm that can modify its attack strategy in real-time as it spreads through internet-connected devices. The research, carried out in collaboration with the Vector Institute, was shared with key national bodies before publication.
Papernot, an associate professor at U of T, emphasized the importance of not neglecting software updates and regular password changes during a panel discussion at the university. He stressed the need for multi-factor authentication, up-to-date devices, and swift deployment of software patches by organizations.
Unlike traditional computer viruses, worms propagate autonomously from one device to another without human intervention. The U of T researchers highlighted that their experimental worm collects information as it navigates through devices, identifying vulnerabilities and passwords that enable further infiltration.
In an uncontrolled scenario, such a worm could exploit internet access and leverage newly discovered vulnerabilities faster than patches can be applied. The researchers emphasized that while some vulnerabilities can be mitigated through software updates, others, such as weak passwords and inadequate IT setups, require more proactive security measures.
Papernot underscored the critical nature of the evolving cybersecurity landscape, particularly in light of the growing threat posed by AI-driven worms. He warned that these new threats are not only more efficient but also cheaper to develop and deploy, enabling hackers to target a larger number of devices.
The findings of a survey conducted by the Communications Security Establishment (CSE) in January revealed that a significant portion of Canadians regularly update their software and use complex passwords. However, there is a need for greater emphasis on unique passwords and enhanced cybersecurity measures, especially in critical infrastructure sectors.
Papernot’s research underscores the imperative for bolstering cybersecurity measures in Canada, particularly concerning the exposure of essential systems like power grids, hospitals, and schools to online vulnerabilities. The call for vigilance in maintaining strong cybersecurity practices is crucial in safeguarding against the evolving threats posed by AI-driven worms.