GenAI a superweapon in the hands of cybercriminals: Akamai CTO Robert Blumofe

Robert Blumofe said over the past decade or so, the cyber threat landscape has moved from attacks by relatively unsophisticated hacktivists who wished to make a point to a more organised form of attacks meant to extort money.

featured-image

Generative artificial intelligence is a superweapon in the hands of cyber threat actors and it is critical for enterprises to integrate safeguards into their LLM-driven chatbots, a leading cybersecurity expert has warned. Over the past decade or so, the cyber threat landscape has moved from attacks by relatively unsophisticated hacktivists who wished to make a point to a more organised form of attacks meant to extort money, said Robert Blumofe, chief technology officer of Akamai Technologies , a US-based cloud security, computing and content delivery services company, in conversation with ET's Annapurna Roy. For these organised cybercriminal gangs, GenAI is now the tool of preference against both enterprises and consumers, he added.

“It is the perfect tool for social engineering , for spear phishing , for constructing malware, for evading defences...



For any number of ways that they could attack, they can now do it far more effectively, scalably and virulently, using generative AI ,” Blumofe said. At the same time, AI models face specific vulnerabilities. For instance, they are far more susceptible to DDoS (distributed denial of service) attacks than traditional applications, he noted.

Further, criminals can inject cleverly crafted prompts into an AI model to make it do things that it should not be doing. Small inputs can have a large impact, he said. Artificial Intelligence(AI) Java Programming with ChatGPT: Learn using Generative AI By - Metla Sudha Sekhar, Developer and Lead Instructor View Program Artificial Intelligence(AI) Basics of Generative AI : Unveiling Tomorrow's Innovations By - Metla Sudha Sekhar, Developer and Lead Instructor View Program Artificial Intelligence(AI) Generative AI for Dynamic Java Web Applications with ChatGPT By - Metla Sudha Sekhar, Developer and Lead Instructor View Program Artificial Intelligence(AI) Mastering C++ Fundamentals with Generative AI: A Hands-On By - Metla Sudha Sekhar, Developer and Lead Instructor View Program Artificial Intelligence(AI) Master in Python Language Quickly Using the ChatGPT Open AI By - Metla Sudha Sekhar, Developer and Lead Instructor View Program Office Productivity Zero to Hero in Microsoft Excel: Complete Excel guide 2024 By - Metla Sudha Sekhar, Developer and Lead Instructor View Program Astrology Vastu Shastra Course By - Sachenkumar Rai, Vastu Shashtri View Program Data Science SQL for Data Science along with Data Analytics and Data Visualization By - Metla Sudha Sekhar, Developer and Lead Instructor View Program Web Development A Comprehensive ASP.

NET Core MVC 6 Project Guide for 2024 By - Metla Sudha Sekhar, Developer and Lead Instructor View Program Office Productivity Mastering Microsoft Office: Word, Excel, PowerPoint, and 365 By - Metla Sudha Sekhar, Developer and Lead Instructor View Program Marketing Digital marketing - Wordpress Website Development By - Shraddha Somani, Digital Marketing Trainer, Consultant, Strategiest and Subject Matter expert View Program Web Development Mastering Full Stack Development: From Frontend to Backend Excellence By - Metla Sudha Sekhar, Developer and Lead Instructor View Program Finance Financial Literacy - TDS, Budget, Income Tax Act, GST, Indirect tax By - CA Rahul Gupta, CA with 10+ years of domain experience, trainer View Program Leadership Business Storytelling Masterclass By - Ameen Haque, Founder of Storywallahs View Program Future of Marketing & Branding Masterclass By - Dr. David Aaker, Professor at Haas School of Business View Program HR & People Management Human Potential and the Future of Employment By - Lynda Gratton, Co-chair of the World Economic Forum Council on Work, Wages and Job Creation, Professor of Management Practice View Program Strategy ESG and Business Sustainability Strategy By - Vipul Arora, Partner, ESG & Climate Solutions at Sattva Consulting Author I Speaker I Thought Leader View Program Finance Financial Reporting and Analytics By - Dr. C.

P. Gupta, Professor: Department of Finance and Business Economics, University of Delhi View Program Marketing Performance Marketing for eCommerce Brands By - Zafer Mukeri, Founder- Inara Marketers View Program GenAI also makes it easy for attackers to cross international boundaries, eroding the differences between threat landscapes across different countries, Blumofe warned. Phishing lures can be generated in any language, whether over SMS, email or even voice, where they can be made to sound convincingly like a native speaker, he said.

Discover the stories of your interest Blockchain 5 Stories Cyber-safety 7 Stories Fintech 9 Stories E-comm 9 Stories ML 8 Stories Edtech 6 Stories So, the challenge for enterprises is to ensure that guardrails are built in for their large language model based chatbots to stick to the domain area they were finetuned for, Blumofe said. Hallucinations are not going away anytime soon – not even for specialised models, he said. “For an insurance company, for example, that chatbot started life as a foundation model that was trained on everything.

That’s a model that could talk about not just how to file a claim, but also about politics, race, gender issues – any number of things that you probably don’t want the model talking about,” he added. Given these realities, Akamai’s roadmap increasingly involves adding capabilities specifically for protecting and securely deploying LLMs, Blumofe said. While AI can be a tool in defending against the increasingly sophisticated cyberattacks, Blumofe cautioned against ‘AI washing’ and said enterprises should focus on the fundamentals of cybersecurity.

“I would caution anybody against thinking that AI can be a magical solution that can identify deepfakes and stop these attacks,” he said. “Any good cyber defence has an AI component to it, but it’s not a silver bullet.” Tried-and-true capabilities like multifactor authentication, encrypted communication, zero-trust access and micro segmentation are now more relevant than ever, even as AI will aid them, Blumofe said.

.