The Cyber Defense eMagazine February Edition for 2024

More documents

Recommendations

Info

standards and practices relating to the authentication, labelling, testing and detection of synthetic content and developing guidance around the use of such techniques like watermarking are good first steps towards removing discrepancies like biases, data hallucination and misuses of data. As a result of the order’s many provisions, testing of language models against multiple frameworks to ensure compliance will see a boost. Typically, software integration and algorithm testing are outsourced to system integrators (SIs) like TCS, Infosys, Wipro, among others. Hence, these players are likely to come up with dedicated solutions and toolkits for such workloads. Another area that can see a surge is LM-Ops tools (language model optimization) within generative AI. Prompts made to tools like ChatGPT must adhere to content safety regulations and need to be flagged off when there’s a discrepancy like biases and harmful language. Hence, prompt optimization is a critical area and because of generative AI’s rapid development, we see the new role of prompt engineers gaining importance day by day. Similarly, data annotation and data labelling are also likely to get a boost. Transparency in the development and use of AI requires clean data sets - the quality of the of output is as good as the data it’s trained on. Hence, technical capabilities that are pre-cursors to developing an AI model are key. For example, Google used Snorkel AI to replace 100K+ hand-annotated labels in critical ML pipelines for text classification, leading to a 52% performance improvement. With the EO’s aim to promote the safe, secure, and trustworthy use and development of AI, the role of regulation takes center stage, shaping a future where large or small companies can profit from while minimizing its own unintended consequences. Market Dynamics: How the AI Order Affects Players All businesses that use AI will be impacted by the executive order, but the impact is not as binary, there’s nuance. It depends on the technological investment in AI and complexity of the workload. It’s a no-brainer that AI adoption requires large investments, and large enterprises are well-positioned to make them. They have the capital to undertake core AI development initiatives like building custom AI models the way Meta and Google did with LLaMA and Bard. Once the regulations come into effect, their offerings will need to comply to the set standards. SMBs, on the other hand, might not have the same monetary capacity to commit a huge amount of money to complex technology projects. This disadvantage gets compounded by the fact that SMBs are a big target for cybersecurity attacks and generative AI has a plethora of vulnerabilities that expose SMBs to attacks, putting their cybersecurity concerns at peak. For SMBs, simple workloads, like deploying a customer support chatbot are more feasible. Once the regulations are in effect, SMBs can integrate regulation-compliant products and offerings into their workflows and reap the benefits that AI brings. In parallel, they can come up with LM-Ops solutions and dedicated toolkits the way small scale ISVs do and expand their offerings. Cyber Defense eMagazine – February 2024 Edition 54 Copyright © 2024, Cyber Defense Magazine. All rights reserved worldwide.
The implementation of regulations coming out of the order are poised to make changes in the future, be it the pace of business cycles, types of solutions and offerings, business workflows or even expansion of new revenue streams. AI-volution and the Future There has been a steady shift in certain processes, particularly as it concerns safety and flagging off content. Traditionally, issues regarding safety and flagging off disparities like biases would be done in retrospect, after AI applications were developed. While this approach does help identify the discrepancies and implement learnings in the future, it doesn’t solve the current problem. Responsible AI by design, as an approach, weaves in transparency, fairness and accountability right form the design phase. It focuses on how we can integrate responsible AI principles at the time of development of AI apps or foundational models, not after the process. It enables training the algorithm in such a way that they adhere to the regulations from the start. Anthropic is a good example of a company that’s scaling AI safely and responsibly with intentionality. They have also instituted a responsible scaling policy (RSP) aimed at mitigating catastrophic risks, in tandem with other measures to mitigate bias, toxicity and misinformation, protecting customer privacy, building robust and reliable systems and using constitutional AI. In fact, their tool Claude 2.1 has made significant gains in honesty, with a 2x decrease in false statements compared to the Claude 2.0, improving the overall accuracy of the tool for its users. Both regulation and intentionality are crucial to ensure that AI evolves in the right direction. The EO uses a combination approach of guidelines and regulation, encouraging companies to develop responsible AI applications and models. The future of AI is bright, but also uncertain. President Biden's executive order lays a framework to steer this powerful tool in a direction that maximizes business and societal benefit while minimizing harm. Regulation and intentional development focused on responsibility are crucial to ensure AI evolves safely and for the greater good. There will always be risks, but if we act thoughtfully the benefits will far outweigh them. Cyber Defense eMagazine – February 2024 Edition 55 Copyright © 2024, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
How One Industry Exemplifies the Im
Page 3 and 4: Data Breach Search Engines --------
Page 5 and 6: @MILIEFSKY From the Publisher… De
Page 7 and 8: Welcome to CDM’s February 2024 Is
Page 9 and 10: Cyber Defense eMagazine - February
Page 15 and 16: 2001 2024 Cyber Defense eMagazine -
Page 19 and 20: How One Industry Exemplifies the Im
Page 21 and 22: That is where things stand in my in
Page 23 and 24: current on the mission and values o
Page 25 and 26: So, monitoring and managing vendor
Page 27 and 28: About the Author Caroline McCaffery
Page 29 and 30: How so? Businesses can make things
Page 31 and 32: Using Cmmc 2.0 To Transform Your Cy
Page 33 and 34: equire the implementation of additi
Page 35 and 36: for the Department of Energy’s Cy
Page 37 and 38: • IT no longer controls where and
Page 39 and 40: For example, the Cloudbrink service
Page 41 and 42: 5 Cybersecurity Resolutions for The
Page 43 and 44: The Importance of Cyber Hygiene for
Page 45 and 46: The key steps to improve your cyber
Page 47 and 48: Connecting Tech to Black America By
Page 49 and 50: Establish partnerships with HBCUs E
Page 51 and 52: Perhaps the most obvious example of
Page 53: Crafting AI’s Future: Decoding th
Page 57 and 58: AI Is Revolutionizing Phishing for
Page 59 and 60: That’s why security awareness tra
Page 61 and 62: culmination of this race will revea
Page 63 and 64: Traditionally, DBSEs would only inf
Page 65 and 66: Enhancing Cybersecurity Defenses: T
Page 67 and 68: Social engineering testing In the e
Page 69 and 70: GitGuardian Researchers Find Thousa
Page 71 and 72: *Emergent trends While everything f
Page 73 and 74: There are multiple tools that will
Page 75 and 76: Good Security Is About Iteration, N
Page 77 and 78: to incorporate architectural and de
Page 79 and 80: Hacking and Cybersecurity Trends to
Page 81 and 82: detect attacks as they are occurrin
Page 83 and 84: Legacy solutions hinder an organiza
Page 85 and 86: About the Author Thomas Müller-Mar
Page 87 and 88: Having worked closely with financia
Page 89 and 90: device is emitting its signal the t
Page 91 and 92: Navigating the API Security Landsca
Page 93 and 94: that entities (users, services, or
Page 95 and 96: examine financial transactions, net
Page 97 and 98: Offensive Awakening: The 2024 Shift
Page 99 and 100: Not only are legislators pushing fo
Page 101 and 102: Let’s dive into how security lead
Page 103 and 104: Overcoming Common Data Security Cha
Page 105 and 106:
The Risks of Over-Privilege Alongsi
Page 107 and 108:
Quishing Campaign Exploits Microsof
Page 109 and 110:
After inserting their email address
Page 111 and 112:
more expensive and time consuming.
Page 113 and 114:
Cotton Sandstorm or Static Kitten h
Page 115 and 116:
Spike in Layoffs Pose Serious Cyber
Page 117 and 118:
About the Author Adam Gavish is the
Page 119 and 120:
The Crucial Role of Data Categoriza
Page 121 and 122:
The Next Generation of Endpoint Sec
Page 123 and 124:
Next-Generation Endpoint Security:
Page 125 and 126:
As I reflect back on the past few m
Page 127 and 128:
Why Is Hardware More Secure than So
Page 129 and 130:
can achieve throughput levels of up
Page 131 and 132:
ecome more secure. By the end of 20
Page 133 and 134:
Zero Trust Matures, Insider Threat
Page 135 and 136:
of the risk of insider threats and
Page 137 and 138:
Zero Trust: Navigating the Labyrint
Page 139 and 140:
• Enhanced Security: Zero trust b
Page 141 and 142:
Cyber Defense eMagazine - February
Page 143 and 144:
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
CyberDefense.TV now has 200 hotseat
Page 151 and 152:
Books by our Publisher: Amazon.com:
Page 153 and 154:
Page 155:
i https://www.whitehouse.gov/briefi
show all

The Cyber Defense eMagazine February Edition for 2024

Create successful ePaper yourself

Delete template?

Save as template?