The G7 Cyber Expert Group (CEG) has published a statement on AI and cybersecurity, outlining the rapid evolution of AI technologies and encouraging jurisdictions to monitor developments, promote public-private-academic collaboration, and proactively address emerging cybersecurity risks AI may pose.
The statement identifies a number of opportunities for AI to enhance cyber resilience:
- Anomaly detection and response;
- Fraud detection and response;
- Predictive maintenance and patching;
- Security Operations Centre efficiency; and
- Vendor and supply chain risk monitoring.
It also sets out ways that AI could amplify existing risk:
- AI-powered phishing or impersonation;
- Automated exploit development; and
- Malware development and evasion.
The CEG calls for firms and stakeholders to explore AI’s potential for enhance their cyber defence capabilities and update their frameworks to reflect AI cybersecurity vulnerabilities. It also encourages them to engage in collaborative research and policy development with technology firms and academia.