Michael Toland, Oklahoma’s top cybersecurity official, faced a daunting experience when he let an AI system operate independently for the first time. After using AI tools for monitoring network activity, the state turned to Darktrace’s “Cyber AI Analyst” to make decisions autonomously. This shift is crucial as cyber threats are evolving rapidly, with attackers employing AI for sophisticated phishing and malware creation. With a small team of 35, Toland’s goal is to effectively counteract the nearly 28 billion potential threats Oklahoma faces annually. While AI agents offer the advantage of speed and efficiency, experts caution against their unchecked use, highlighting the need for proper supervision. Ultimately, leveraging AI could shift the balance back to cybersecurity defenders.
[ad_2]
[ad_1]
Michael Toland, Oklahoma’s top cybersecurity official, recently faced a nerve-wracking decision as he allowed artificial intelligence (AI) to operate autonomously within his state’s network security system. This shift came not from a sudden surge in technology but from the escalating threats posed by cybercriminals, many of whom now use AI to enhance their attacks.
Oklahoma has long utilized AI and machine learning tools to monitor network activities for suspicious behavior. However, after employing Darktrace’s Cyber AI Analyst in a “human confirmation mode,” the state decided to give the AI more control to keep up with increasingly sophisticated cyber threats.
Toland likens this leap of faith to the feelings a parent might have when letting go of their child’s hand. “You have to do it if you want to get to a certain place, but it doesn’t make it easy,” he said. With a limited staff of just 35 people, Toland oversees a network that faces around 28 billion potential cyber threats each year. The AI agent, capable of analyzing network packets at lightning speed, can handle the workload of about 500 human analysts.
Despite the risks associated with granting AI decision-making power, Toland emphasizes the urgency of identifying abnormal network activity, as data breaches often take an average of 194 days to detect. Experts like Sounil Yu caution against unleashing AI without proper oversight, likening it to playing Russian roulette. Yet, Yu also believes that as AI technology improves, it may eventually give cybersecurity defenders the upper hand against attackers.
In conclusion, while the integration of AI into cybersecurity presents both challenges and promises, Toland and his team are taking proactive steps to combat the relentless tide of cyber threats. The journey toward fortified digital defenses is ongoing, and having autonomous AI on their side may just be the key to ensuring Oklahoma’s security.
Tags: Cybersecurity, Artificial Intelligence, Oklahoma, Darktrace, Cyber Threats, Network Security, Ransomware
[ad_2]
What is Agentic AI?
Agentic AI is an advanced technology that helps cybersecurity teams in Oklahoma protect against cyber threats. It uses smart algorithms to analyze data and spot potential attacks quickly.
Why is Agentic AI considered ‘scary’?
Some people find Agentic AI ‘scary’ because it can operate with a level of autonomy. This means it can make decisions without human input, which raises concerns about control and monitoring.
How does Agentic AI help in cyber operations?
Agentic AI enhances cyber operations by speeding up the detection of threats and responding to them more effectively. It helps teams stay one step ahead of cybercriminals.
Is Agentic AI safe to use?
While Agentic AI is designed to improve security, like any technology, it comes with risks. It’s important to have proper measures in place to manage its use and ensure safety.
Can Agentic AI replace human workers in cybersecurity?
No, Agentic AI is not meant to replace human workers. Instead, it supports them by handling routine tasks, allowing human experts to focus on more complex issues that require critical thinking.
[ad_1]
