While artificial intelligence (AI) technology has emerged as a game changer in cybersecurity, one federal official called for some caution this week by saying that AI integration could be more harmful than good without following strong underlying security practices.
Garn Lacey, deputy director of Cyber and Technical Security at the Diplomatic Security Agency, emphasized his message on May 28 in a statement at the Public Sector Cyber Risk Conference hosted by Qualys and Govexec.
“[AI] It's a big magnifying glass about who you are already,” Lacey said. [and] Solid, AI will make you better. If there is a crack in the foundation, AI will absolutely confuse you. ”
Lacey emphasized that before adding sophisticated technology like AI, organizations must revisit and strengthen cyber hygiene practices. He said basic but important tasks, such as maintaining comprehensive software material invoices, are often overlooked due to lack of appeal.
“It's not sexy, but it's important, especially as our technology continues to advance and move faster,” Lacey said.
AI is able to “amplify weak spots and amplify strengths,” and it is important to first ensure a strong cybersecurity foundation. He says the principle applies to all emerging technologies, from AI to quantum computing to supply chain innovation.
He opposed the enthusiasm to “spray that magical AI” on existing systems. “If these critical components are missing, AI will open it wide and amplify the vulnerability,” he said.
