
CYBER-SECURITY IN the age of artificial intelligence in some ways resembles(类似于) modern warfare. It is asymmetric(不对称的;不平衡的): small bands of attackers armed with the latest technology can penetrate(穿透;侵入) the most powerful defences. And the weaponry is increasingly autonomous(自主的;自动的). As Nikesh Arora, boss of Palo Alto Networks (PAN), a big cyber-security firm, puts it, “AI has to fight AI.” The good guys do not always win.
人工智能时代的网络安全在某些方面类似于现代战争。它具有不对称性:一小撮装备最新技术的攻击者能够穿透最强大的防御。而且武器日益自主化。正如大型网络安全公司Palo Alto Networks(PAN)的老板尼凯什·阿罗拉所说,“AI必须对抗AI。”好人并不总是赢。
In recent weeks Anthropic and OpenAI have unveiled AI models—Mythos Preview and 5.5-Cyber, respectively—so capable of penetrating weak spots in cyber-defences that the AI labs have released them only to trusted firms.(最近几周,Anthropic和OpenAI发布了AI模型——分别是Mythos Preview和5.5-Cyber——它们如此擅长穿透网络防御中的薄弱点,以至于AI实验室只将它们提供给可信赖的公司。) But that is no guarantee of safety. New models are emerging all the time and hackers already use earlier varieties. Moreover, as Mr Arora says, it is not a fair fight. With AI, lone wolves(独狼(单打独斗者)) can carry out attacks that used to require whole teams, and they have to be right just once to succeed. Defenders, by contrast(相比之下), have to be right every time.
最近几周,Anthropic和OpenAI发布了AI模型——分别是Mythos Preview和5.5-Cyber——它们能够穿透网络防御中的薄弱点,以至于AI实验室只将它们提供给可信赖的公司。但这并不能保证安全。新模型不断涌现,黑客已经在使用早期版本。此外,正如阿罗拉先生所说,这不是一场公平的战斗。有了AI,独狼可以执行过去需要整个团队才能完成的攻击,而且他们只需要成功一次。相比之下,防御者必须每次都正确。
That is why cyber-security firms, as well as businesses at large(整体上;整个), are scrambling(争相;仓促行动) to prepare for a wave of(一波……的浪潮) AI-powered cyber-crime. Within the industry, PAN and leading rivals such as CrowdStrike have formed alliances to try to make deployment of the latest models safer. Among their customers, the immediate reaction to models like Mythos and 5.5-Cyber was one of “panic and freak-out(恐慌和崩溃)”, says Adam Meyers of CrowdStrike. But the models’ appearance was also a wake-up call(警钟;警示). Assessments of cyber-readiness are moving from IT departments to C-suites and boardrooms. For the time being, these are more likely to be pessimistic(悲观的) than optimistic.
这就是网络安全公司以及广大企业竞相准备应对一波AI驱动的网络犯罪的原因。在行业内,PAN和CrowdStrike等主要竞争对手已结成联盟,试图让最新模型的部署更加安全。CrowdStrike的亚当·迈耶斯表示,它们的客户对Mythos和5.5-Cyber等模型的直接反应是“恐慌和崩溃”。但这些模型的出现也敲响了警钟。对网络准备情况的评估正从IT部门转移到高管层和董事会。目前,这些评估很可能是悲观而非乐观的。
