What AI and Security Can Learn from Monsters
By leveraging artificial intelligence (AI), we can significantly improve cybersecurity performance. But in which domains should we focus these efforts? Australian cybersecurity and AI expert Anu Kukar explained this during Cybersec Netherlands.
Anu Kukar at Cybersec Netherlands 2024
Anu Kukar presented her keynote at Cybersec Netherlands 2024. [Photo: Daan Jeurens]
“Of all job roles, IT experiences the highest impact of AI,” began Anu Kukar’s keynote. Kukar, born in Denmark with Indian roots, recently returned to her native country after living in Australia. A true global citizen, as she likes to describe herself. Kukar has previously worked at Accenture, Deloitte, KPMG, IBM, and major Australian banks. She is now the co-host of the podcast The Cyber Siblings.
Her argument centers on leveraging AI for security purposes. “AI is already widely used in organizations today. Many are experimenting with pilot projects, but these often don’t focus on the security domain,” she explained during an interview about her keynote. “This isn’t new. Historically, security has often lagged behind other applications.”
During her presentation, Kukar made a unique connection with the animated film Monsters, Inc., created by Pixar and released by Disney. “In that movie, monsters generate energy by scaring children,” she recounted. However, the big furry monster, Sulley, discovers that laughter is a more powerful energy source. “The film illustrates how fear of the unknown can be replaced with empathy and understanding, leading to better solutions. The same applies to AI and security. If we use AI effectively, we can optimize our security performance.”
Five Innovations
The key question is: where should we apply AI? During her presentation, Kukar outlined five strategies to enhance security functions, focusing more on detection than response.
- Human Behavior Monitoring: AI can detect changes in human behavior to address limitations of the human factor.
- Identity Management: AI can identify login patterns, enforce two-factor authentication, and block suspicious login attempts.
- Cloud Security: AI helps provide an overview of cloud risks, particularly when working with multiple cloud providers.
- Sensitive Data Identification: AI can identify, label, and monitor the movement of sensitive data within an organization.
- Vulnerability Management: AI detects and monitors vulnerabilities, including those from Internet of Things (IoT) devices.
The prominence of AI in these domains varies by organization. According to Kukar, “AI can be valuable in any of these areas. We’re seeing more developments in these fields, and rightly so. We need AI for security functions. And adopting a Monsters, Inc. mindset can help us achieve that.”
Source: Computable.nl
