Generative AI in Cybersecurity: Rise of the Machines?

In recent years, generative artificial intelligence (AI), especially Large Language Models (LLMs) like ChatGPT, has revolutionized the fields of AI and natural language processing. From automating customer support to creating realistic chatbots, we rely on AI much more than many of us probably realize. The AI hype train definitely reached full steam in the last several months, especially for cybersecurity use cases, with the release of tools such as Stable Diffusion, Midjourney, DALL-E, ChatGPT / GPT-3.5 / GPT-4. Unfortunately, almost all of this attention focuses on the potential negative impacts of AI, while ignoring beneficial use cases to help organizations defend their networks. As we know, disasters almost always make for better primetime news viewing than cute puppies, and most of these articles have big “if it bleeds, it leads” energy. But is all this negative hype warranted? Let's examine a few concrete use cases and find out!

[As presented during the SANS AI in Cybersecurity Summit 2023]

Transcript

1. © 2 0 2 3 S P L U N K I N C .
   Generative AI in
   Cybersecurity
   Rise of the Machines?
   David J. Bianco
   Staff Security Strategist
   SURGe by Splunk
   @DavidJBianco
   @DavidJBianco@infosec.exchange
   

   View Slide

2. © 2 0 2 3 S P L U N K I N C .
   > David Bianco | Staff Security Strategist, SURGe
   q 20+ years of experience in incident
   detection & response, threat hunting,
   CTI, and other Blue-team topics
   q SANS Certified Instructor
   q Creator of the Pyramid of Pain & Hunting
   Maturity Model
   q Terrible at introducing myself
   

   View Slide

3. © 2 0 2 3 S P L U N K I N C .
   The AI (Hype?) Train
   ALLL ABOAAARD!
   Source: Midjourney
   

   View Slide

4. © 2 0 2 3 S P L U N K I N C .
   According to the media, we’re doomed!
   If we bleed, it leads
   Source: Harvard Business Review
   Source: ZD Net
   Source: CSO/IDG
   

   View Slide

5. © 2 0 2 3 S P L U N K I N C .
   New tech always freaks people out
   But then we adapt and figure out how it benefits us as well
   Source: Public Domain Source: Public Domain
   

   View Slide

6. © 2 0 2 3 S P L U N K I N C .
   Fear: AI will take our jobs
   Humans will always be integral to the process
   Source: Infosecurity Magazine
   Source: NSA :Source Public Domain
   

   View Slide

7. © 2 0 2 3 S P L U N K I N C .
   Fear: AI will write undetectable malware
   Maybe, but ”no code” has been around for a while
   Source: Forcepoint
   Source: VirusTotal
   Source: Forcepoint
   

   View Slide

8. © 2 0 2 3 S P L U N K I N C .
   Fear: AI will create perfect phish
   Phishing is already pretty sophisticated
   Source: CNet
   

   View Slide

9. © 2 0 2 3 S P L U N K I N C .
   Fear: AI will create perfect phish
   Phishing is already pretty sophisticated
   Source: itgovernance.eu
   

   View Slide

10. © 2 0 2 3 S P L U N K I N C .
    Fear: AI will create perfect phish
    Phishing is already pretty sophisticated
    Source: Wired
    

    View Slide

11. © 2 0 2 3 S P L U N K I N C .
    Why the freak-out?
    Genevieve Bell may have the answer
    Time
    • AI is
    available
    24/7/365,
    with no
    need to
    rest
    Space (??)
    • Virtual
    spaces
    • Increased
    malicious
    traffic
    People
    • Is this
    intelligence
    Artificial or
    Natural?
    New tech creates “moral panic” when it affects our relationships with:
    

    View Slide

12. © 2 0 2 3 S P L U N K I N C .
    AI is augmentation, not annihilation
    Maybe it can help bridge the “skills gap”
    Source: David J. Bianco & ChatGPT
    

    View Slide

13. © 2 0 2 3 S P L U N K I N C .
    Conclusion
    AI could be a great opportunity for us, if we are careful
    Source: Arild Vågen Source: Midjourney Source: Midjourney
    

    View Slide

14. © 2 0 2 3 S P L U N K I N C .
    Generative AI in
    Cybersecurity
    Rise of the Machines?
    David J. Bianco
    Staff Security Strategist
    SURGe by Splunk
    @DavidJBianco
    @DavidJBianco@infosec.exchange
    

    View Slide