Artificial intelligence experts are cautioning individuals to utilize strong passwords and promptly update their software to combat the emergence of “AI-driven computer worms,” a new type of cyber-threat capable of launching tailored attacks on devices, draining resources and data as they seek out new targets.
In a recent study, a team from the University of Toronto, led by Nicolas Papernot, chair of the Canadian Institute for Advanced Research AI, demonstrated that publicly available AI models could power an adaptable worm that can adjust its attack methods while spreading across internet-connected devices like laptops, printers, and cameras.
This research, in partnership with the Vector Institute, was shared with key national bodies involved in science, security, and defense prior to its release. Papernot, an associate professor at U of T, emphasized the importance of promptly updating software and regularly changing passwords during a panel discussion at the university.
Unlike traditional computer viruses, worms can self-propagate between devices without human intervention. The AI-driven worm developed by the U of T team gathers information as it traverses devices, exploiting vulnerabilities and weak passwords to infect new targets. Such worms can evolve rapidly, learning from newly discovered vulnerabilities and outmaneuvering software patches meant to thwart them.
Papernot highlighted that these AI-driven worms are not only more effective than previous threats but also cost-efficient to build and deploy, posing a significant shift in cybersecurity risks. Samir Chhabra from Innovation, Science and Economic Development Canada noted that the low costs associated with these worms enable hackers to target a larger number of victims.
A recent survey by the Communications Security Establishment found that while a majority of respondents routinely update their software and use complex passwords, there is room for improvement in cybersecurity practices. Papernot stressed the need for enhanced cybersecurity measures in critical infrastructure sectors in Canada to mitigate the risks posed by these evolving threats.
