Implications of Artificial Intelligence for Cybersecurity

In recent years, interest and progress in the area of artificial intelligence (AI) and machine learning (ML) have boomed, with new applications vigorously pursued across many sectors. At the same time, the computing and communications technologies on which we have come to rely present serious security concerns: cyberattacks have escalated in number, frequency, and impact, drawing increased attention to the vulnerabilities of cyber systems and the need to increase their security. In the face of this changing landscape, there is significant concern and interest among policymakers, security practitioners, technologists, researchers, and the public about the potential implications of AI and ML for cybersecurity. The National Academies of Sciences, Engineering, and Medicine convened a workshop on March 12-13, 2019 to discuss and explore these concerns. This publication summarizes the presentations and discussions from the workshop. Table of Contents Front Matter 1 Introduction and Context 2 Artificial Intelligence and the Landscape of Cyber Engagements 3 Currently Deployed Artificial Intelligence and Machine Learning Tools for Cyber Defense Operations 4 Adversarial Artificial Intelligence for Cybersecurity: Research and Development and Emerging Areas 5 Security Risks of Artificial Intelligence-Enabled Systems 6 Deep Fakes 7 Wrap-Up Discussion: Identifying Key Implications and Open Questions Appendixes Appendix A: Workshop Agenda Appendix B: Additional Discussion Questions from Sponsor Appendix C: Planning Committee and Staff Biographies Appendix D: Speaker Biographies Appendix E: Abbreviations and Acronyms