Why AI and ML are not cybersecurity solutions–yet
AI and ML are often touted as silver bullets, but real-world applications for the technology seem thin on the ground.
Artificial intelligence (AI) and machine learning (ML) are some of the latest tools being used in the fight against application security vulnerabilities. However, the complexities involved can make it hard to discern what’s actually being used and what lives in a fictional Hollywood setting.
I spoke to Ilia Kolochenko, CEO of web security company High-Tech Bridge to clear up any confusion.
Scott Matteson: What is the overall state of application security today? Has it improved in the last 12 months? If not, why?
Ilia Kolochenko: The overall number and complexity of application security risks continue to grow steadily. Web, mobile, and even IoT applications have become an inseparable part of our personal and business daily life. People buy, sell, take loans, learn, vote, and even fall in love using applications. Virtually every startup has its own application, let alone large corporation and governmental entities.
However, an increasing lack of skilled technical talents and a predominant trend to cut application development costs by outsourcing have produced a skyrocketing number of insecure and vulnerable applications. Even worse, startups that often have to compete in a very aggressive and turbulent environment are simply disregarding application security and privacy due to a lack of available resources.
Scott Matteson: AI and ML are often touted as silver bullets, but real-world applications for the technology seem thin on the ground. How can businesses benefit on a practical level from AI and ML?
Ilia Kolochenko: First of all, we need to define the AI acronym that is widely misused today. Strong AI, capable of learning and solving virtually any set of diverse problems akin to an average human does not exist yet, and it is unlikely to emerge within the next decade.
Frequently, when someone says AI, they mean Machine Learning. The latter can be very helpful for what we call intelligent automation – a reduction of human labor without loss of quality or reliability of the optimized process.
