In the ongoing battle between cyberattackers and defenders, the attackers have had the advantage for a long time. They only need to succeed once, while defenders must be successful all the time. However, according to Jeetu Patel, an executive at Cisco, the tide is starting to turn in favor of the defenders.
Patel explains that artificial intelligence (AI) can play a crucial role in predicting cyberattacks and enabling defenders to respond in near real-time. While bad actors may also have access to AI, its effectiveness depends on the quality of data and the ability to correlate it. Companies that invest in data layers and leverage cross-domain telemetry correlation can identify patterns and trigger high-level alerts from low-level signals.
As AI becomes more prominent, defenders will have better models to predict probing attacks and the methods used by attackers. This proactive approach allows organizations to closely monitor activities and take action, creating a more challenging environment for cybercriminals.
However, Patel warns that attacks will become more sophisticated, making it harder to distinguish between legitimate and malicious activity. Attackers may personalize their approaches, making it difficult to identify them as threats. To address this, the industry needs to focus on correlating data sets across different domains to gain valuable insights.
The use of ransomware and extortion attacks has increased, according to the Cisco Talos Incident Response report. Additionally, there has been a rise in sophisticated attacks on networking devices, often attributed to state-sponsored actors.
While AI offers promising possibilities, it is important to remain vigilant and prepared for evolving threats. By leveraging AI and improving data correlation, defenders can enhance their ability to protect against cybercriminals and stay one step ahead.
Source: PhilNews24 | December 11, 2023
