Generative AI has taken centre stage this year as leaders move GenAI projects from theory into practice. Consumer-grade AI, like ChatGPT, has captured everyone’s imagination with its ability to generate content. Yet, GenAI’s impact on businesses and organisations promises to be more profound from heightened productivity and transforming how we work, to developing more personalised experiences and advancing medical diagnosis.
The emerging use of GenAI presents significant opportunities as well as challenges in the field of cybersecurity. While its deep learning techniques can be used by malicious actors to create new attack vectors, GenAI can be a powerful tool to protect data and IT systems.
But what should organisations here in Ireland do to unlock the value of GenAI in a responsible manner?
Addressing the risks of GenAI
Firstly, leaders need to confront the new risks linked to the development of GenAI. The boost in speed and easy automation that GenAI allows hackers to discover vulnerabilities faster, develop malware in real-time, and develop more credible phishing emails and digital spoofing methods.
That is why it is crucial that GenAI must be taken into account in the security measures of every organisation in Ireland from now on. Steps that prevent GenAI systems from becoming the target of attacks, and reduce the chances of falling victim to fraud or new attack surfaces due to the emergence of deepfakes.
As businesses embrace the transformative power of GenAI, a critical consideration emerges in balancing the security of sensitive data amid the ever-changing global regulatory frameworks. Businesses around Ireland must navigate the complex web of data privacy laws, all while ensuring their GenAI projects don’t inadvertently leak confidential information.
Responsible deployment of GenAI requires business and IT leaders to take a proactive approach including the development of robust governance practices, continuous monitoring of GenAI systems, and also addressing the talent gap. The Dell Digital Pulse Survey published last year revealed a lack of in-house cybersecurity skills as the second most common barrier to enhancing cybersecurity.
To secure GenAI effectively, organisations must roll out cutting-edge infrastructure built on trust, starting from the hardware level and extending all the way to the data and the user. The goal is to have robust access control measures that prevent malicious access and potential misuse of IT systems.
Above all, IT leaders need to consider GenAI data risks in the four stages of the GenAI data lifecycle: data sourcing, data preparation, model customisation and operations and scaling. For each stage, the focus needs to be on mappng potentail attack vectors and migiation actions that can be taken should that risk emerge.
However, the threat landscape is not one-sided. Gen AI systems themselves are susceptible to adversarial attacks, making them potential targets for exploitation. Securing these systems starts with the development of trusted devices and infrastructure, reinforced by rigorous access control to prevent unauthorised use. Given GenAI reliance on extensive datasets for learning and decision-making, safeguarding the privacy and integrity of data is paramount.
Therefore the next step is to ensure that data classification, encryption, and secure storage and transmission of data are made possible. Looking ahead, companies should also consider having a contingency plan. Developing a strong cyber recovery strategy ensures there’s a plan B in place should something unforeseen arise.
At Dell, we recommend that businesses use advanced security approaches including adopting a zero-trust framework to protect and contain AI systems, with these principles incorporated into the design and development of AI systems.
By laying this groundwork for trust and security, businesses can harness the potential of GenAI responsibly and unlock its value while safeguarding against potential risks.
GenAI strengthens cybersecurity
As the industry works to address these risks, GenAI has emerged as a powerful technology to help organisations better protect themselves from rapidly evolving cyber threats.
GenAI provides cybersecurity professionals with the ability to analyse vast amounts of security data, use that data to predict possible threats and implement measures to prevent such attacks.
Consider, for example, detecting anomalies in network traffic or discovering suspicious email content. GenAI can then predict future threats or identify vulnerabilities because it automatically learns from past incidents and threat information feeds.
GenAI’s advanced automation can change the way we look at security, especially in the areas of prevention and detection control. By automating threat detection, GenAI reduces the time to detect and respond to attack attempts, limiting potential damage. By automating routine cybersecurity tasks, such as incident reporting or threat sharing, security teams can focus on staying one step ahead of cyber criminals.
Content creation may not be the first function that comes to mind when you think of GenAI and cybersecurity, but it is also interesting for security awareness training. By using GenAI to personalise training modules, organisations can roll out cyber training that is based on the role of individual employee, their past behaviour, and common threats they encounter. That level of detail in training can reduce human error, which is a major factor in many security incidents.
Additionally, to fully harness the true power of GenAI, security teams must maintain constant vigilance and adaptability in the face of new and evolving cyber threats. This demands a sustained investment in sophisticated defense mechanisms, including adaptive behavioural analytics and machine learning technologies. Keeping a close eye on the shifting dynamics of the cyber attacker landscape, while proactively identifying vulnerabilities and reducing the risk of fraud, is crucial in this fast-paced digital era.
An optimistic look at the future
Without a doubt, GenAI is a transformative technology with a profound impact on the cybersecurity landscape in Ireland, presenting both challenges and opportunities that demand a strategic rethink of our cybersecurity strategies.
The real value will be in developing applications that identify and respond to security threats and at the same time also can forecast potential future dangers. Automating detection processes and enhancing forensic investigations can again add a security layer while also delivering customised security training for employees, which ensures that as security operations expand, the human element remains both informed and prepared.
Business and IT decision-makers in Ireland are aware of the need to enhance their cybersecurity posture amid these changes. According to our Dell Digital Pulse survey, a remarkable 66 % of Irish businesses are gearing up to invest in their cybersecurity this year.
At Dell Technologies, using technology responsibly is the foundation of what we do. That is why we’re working with customers and partners to leverage the benefits of GenAI while proactively addressing its risks. We recommend robust security measures, continuous monitoring, and a flexible, evolving approach to data privacy and ethics. In this way, the relationship between AI and cybersecurity will become something to be optimistic about.
By: Ivor Buckley, Field CTO at Dell Technologies Ireland and Northern Ireland
