Skip to content

Worry from CISA director about tech industry potentially replicating errors in the development and implementation of Artificial Intelligence

Cybersecurity's massive valuation stems from skewed motivations, with speed over safety prevailing, as asserted by Jen Easterly.

Warning from CISA Director about the potential for AI technology to replicate past industry errors
Warning from CISA Director about the potential for AI technology to replicate past industry errors

Worry from CISA director about tech industry potentially replicating errors in the development and implementation of Artificial Intelligence

In a significant move to address the growing concerns around cybersecurity, Jen Easterly, the Director of the Cybersecurity and Infrastructure Security Agency (CISA), has called for a fundamental shift in the approach to security. Easterly emphasizes the need to move security considerations as far left as possible, making technology manufacturers and software providers responsible for security by design.

This approach aims to catalyze a more sustainable approach to security, focusing on prevention rather than post-mortem analysis. Easterly's call to action comes as artificial intelligence (AI) and generative AI solutions increasingly descend into the technology ecosystem.

Major trillion-dollar companies, such as Nvidia, Tencent, and IBM, are integrating generative AI into their core products. Nvidia, a leader in AI GPUs, has invested $5 billion in Intel for strategic AI computing collaborations. Tencent, with its AI Application Prosperity Plan, and IBM, with its plans to incorporate generative AI offerings into its products, are also at the forefront of this technological revolution.

The rush to market is particularly evident in the field of generative AI, with the release of ChatGPT launching a race to incorporate the technology into every facet of the enterprise tool chain. Companies like Slack and Google (with its productivity suite including Docs and Sheets) are also jumping on the bandwagon.

However, Easterly has expressed concerns that the same issues of security falling to the wayside may apply to these AI-infused products. She suggests that companies can drive down the number of vulnerabilities without requiring customers to patch every month when vulnerabilities are released.

This shift in responsibility is part of a broader federal push to place the burden of security on technology providers. This is a core part of the recently released national cyber strategy. U.S. cybersecurity officials are making efforts to shore up critical infrastructure, with Acting National Cyber Director Kemba Walden noting that the national cyber strategy was mostly well received.

Easterly's comments build on the efforts of cybersecurity officials to counter ransomware, with some consideration for a ban on ransom payments. Anne Neuberger, deputy national security advisor for cyber and emerging technologies, has outlined these efforts.

The rapid introduction of these AI-infused products may alter the way users interact with technology. As the technology industry and critical infrastructure maintainers rethink security, it is clear that the current cyber problem is not just a technology problem, but also a culture problem. Easterly is rallying the industry to embrace this challenge and work towards a more secure future.

Read also:

Latest