Inside DEF CON: Michael Brown on how AI/ML is revolutionizing cybersecurity

Summary: At DEF CON, Trail of Bits Principal Security Engineer Michael Brown told ISMG's Michael Novinson that AI/ML techniques can surpass traditional software analysis as Moore's law slows and conventional bug-finding yields diminishing returns. Brown described AI/ML systems as descriptive rather than prescriptive, and said Trail of Bits research found that vulnerabilities in AI/ML systems differ significantly from those in traditional software, requiring distinct security methods.
Key Takeaway: Trail of Bits' Buttercup is one of seven finalists in DARPA's AIxCC, competing next year on autonomously detecting and patching vulnerabilities in real-world software - a capability that changes who, or what, is doing vulnerability remediation.

Read the original at Trail of Bits Blog ↗