AI attacks raise the pace, not create a new attack class

Transcript

Transcribed by machine (Whisper) from the episode’s audio, so a word may be off here and there.

1. 28:55

   But given your history in security, this is the first time in my career in technology where some very smart, well-educated technologists are like, we need to turn the Internet off. We just got to air gap everything because the Internet is going to fall apart in the next year and will be unsafe for critical systems to touch it. um how how much do you believe that to be like a reasonable probability in the future where there are lots of critical systems that society cannot rely on touching the internet i mean i think it's nonsense you know uh like is security and and what agents can do and and the risk that they pose is that serious of course that serious business we should all look at that and go yeah we got to make that we lock things down, you know, but is the world going to end because of these agents anytime

2. 29:40

   soon? No. And when you look at what the agents are doing, I think there's this sort of mythical view of what an agent does. Like an agent doesn't just beam itself from your computer to another computer. It actually just does the same thing a human would do, just better and faster, right? So if you think about what companies like CrowdTrack have done for a long time, we prevent against these sort of attacks. Now they might come faster. There might be, you know, more lower level sort of vulnerabilities chained together and those sort of things. Great. You know, great for the adversary, not great for the defender, but it's building the technology that can deal with all these sort of attacks. So what has AI done? It's created more vulnerability. So you have more of them and, you know, you have more exploitation coming faster. So it's more and faster, but there

3. 30:29

   isn't like a unique class that all of a sudden an agent just beams itself somewhere. And I think people just get wrapped around the axle of like there's some new class of technique that's taken there isn't it's just been trained on what we know it hasn't developed its own yet and that's why I kind of look at it and go security again is going to be an enabler for AI which I think is incredibly important for the security industry because normally it's you know you're putting the brakes on you know we have to take time you're not letting the business run as fast as they want And now everyone's coming to CrowdStrike and others going, well, how do you make AI secure so we can go faster in AI?

4. 31:07

   So that's the way I would look at it. Like, AI is here to stay. I think some of the concern is there, and it should be. there but sort of like there's a lot of um uh kind of doomerism around some of this stuff and i i