Microsoft spearheads industry-wide charter against AI cyber attacks

Security professionals can rely on the framework to fight cyber attacks targeting corporate machine learning systems

Some of the tech industry’s biggest names, including IBM and Nvidia, have teamed up with Microsoft to launch an industry-focused open framework to empower security analysts to fight against advanced cyber threats.

The Adversarial ML Threat Matrix sees more than 11 organisations, as well as the not-for-profit MITRE, pool resources into drafting a playbook for detecting, responding to and remediating threats against machine learning systems.

With the rise of AI and machine learning systems being deployed by businesses across the world, cyber criminals and hackers are increasingly pivoting to finding ways to disrupt these business-critical platforms. 

There’s a significant gap between how these systems are being increasingly targeted and how vulnerable they are due to a lack of protection, according to Microsoft, which is spearheading these efforts.

“When it comes to Machine Learning security, the barriers between public and private endeavors and responsibilities are blurring; public sector challenges like national security will require the cooperation of private actors as much as public investments,” said director of machine learning research with MITRE, Mikel Rodriguez. 

“So, in order to help address these challenges, we at MITRE are committed to working with organizations like Microsoft and the broader community to identify critical vulnerabilities across the machine learning supply chain. This framework is a first step in helping to bring communities together to enable organizations to think about the emerging challenges in securing machine learning systems more holistically.”

This initiative is seen as the first step in empowering security teams to defend against attacks on machine learning systems, with the framework systematically organising the techniques used by adversaries. These tabulated tactics and techniques will be available to cyber security professionals as a resource they can use to monitor strategies around protecting their businesses’ machine learning deployments.

The matrix is structured like the ATT&CK framework, another widely-adopted cyber security framework, so that security analysts don’t have to learn anything new or different to understand how to manage machine learning threats. 

Microsoft is also seeding the framework with a curated set of vulnerabilities and adversary behaviours that itself and MITRE have betted to be effective against production systems. Analysts can, therefore, focus on realistic and tangible threats to machine learning systems rather than abstract or hypothetical dangers.

Featured Resources

Consumer choice and the payment experience

A software provider's guide to getting, growing, and keeping customers

Download now

Prevent fraud and phishing attacks with DMARC

How to use domain-based message authentication, reporting, and conformance for email security

Download now

Business in the new economy landscape

How we coped with 2020 and looking ahead to a brighter 2021

Download now

How to increase cyber resilience within your organisation

Cyber resilience for dummies

Download now

Recommended

HackBoss malware is using Telegram to steal cryptocurrency from other hackers
cryptocurrencies

HackBoss malware is using Telegram to steal cryptocurrency from other hackers

16 Apr 2021
NSA releases guidance on voice and video communications security
Voice over Internet Protocol (VoIP)

NSA releases guidance on voice and video communications security

18 Jun 2021
Ransomware criminals look to other hackers to provide them with network access
ransomware

Ransomware criminals look to other hackers to provide them with network access

17 Jun 2021
CVS Health data breach leaves a billion records exposed
data protection

CVS Health data breach leaves a billion records exposed

16 Jun 2021

Most Popular

How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

16 Jun 2021
Q&A: Enabling transformation
Sponsored

Q&A: Enabling transformation

10 Jun 2021
Ten-year-old iOS 4 recreated as an iPhone app
iOS

Ten-year-old iOS 4 recreated as an iPhone app

10 Jun 2021