Information security pros and vendors will need to master artificial intelligence (AI) to fight threat actors who are already leveraging it, the annual RSA Conference in San Francisco has been told.
“Without good AI, zero trust has zero chance,” RSA chief executive Rohit Ghai said in the conference’s opening keynote on Monday. “Without good AI, bad AI will take us for a ride.” And, he added, “without AI’s help, identity [verification] is a sitting duck.”
Identity, he noted, is the most targeted part of an organization’s IT surface. AI can sniff out sophisticated and relentless phishing campaigns launched by bad AI, he argued. AI is needed to manage millions of access entitlement relationships that can change every second. AI can recognize over-provisioned accounts and flag suspicious privilege escalation.
But, he warned, AI will also change the nature of cybersecurity and identity management jobs. Many cybersecurity companies announcing AI products call them “co-pilots,” meaning humans will do the same jobs they’ve been doing for years but assisted by AI solutions.
“The co-pilot description sugar-coats a scary truth,” warned Ghai: “Over time we must expect that many [cybersecurity] jobs will disappear, many will change, and some will be created.”
This is OK, he said, in part because there is a shortage of cybersecurity talent. “We may remain in the cockpit for a little bit longer,” he added, “but we will need to work differently” in an AI-powered world.
“AI will make the easier decisions and automate most identity workflows. Humans will supervise the more impactful decisions and handle exceptions. Eventually, when we exit the cockpit we will have important roles like training, supervising, regulating, ethics and monitoring AI for air traffic control and designing flight plans.
“AI learns from the questions we ask it. We will train AI by asking well-specified thoughtful questions. We will invent new AI models and algorithms. We will cleanse and label the data that fuels AI.
“As we have learned with every new technology, AI will be a target for the adversary. Good AI will protect cyberspace, and we, the humans of identity will protect AI. We will innovate to prevent jailbreaking of good AI. We will deliver solutions to prevent data poisoning and prompt injections to ensure good AI remains aligned with our objectives.”
But, he added, “to prepare for this AI-powered world, we must confront our identity [management] crisis head-on. We need to re-imagine our role and our place in identity.”
