Microsoft spearheads industry-wide charter against AI cyber attacks

Security professionals can rely on the framework to fight cyber attacks targeting corporate machine learning systems

Some of the tech industry’s biggest names, including IBM and Nvidia, have teamed up with Microsoft to launch an industry-focused open framework to empower security analysts to fight against advanced cyber threats.

The Adversarial ML Threat Matrix sees more than 11 organisations, as well as the not-for-profit MITRE, pool resources into drafting a playbook for detecting, responding to and remediating threats against machine learning systems.

With the rise of AI and machine learning systems being deployed by businesses across the world, cyber criminals and hackers are increasingly pivoting to finding ways to disrupt these business-critical platforms. 

There’s a significant gap between how these systems are being increasingly targeted and how vulnerable they are due to a lack of protection, according to Microsoft, which is spearheading these efforts.

“When it comes to Machine Learning security, the barriers between public and private endeavors and responsibilities are blurring; public sector challenges like national security will require the cooperation of private actors as much as public investments,” said director of machine learning research with MITRE, Mikel Rodriguez. 

“So, in order to help address these challenges, we at MITRE are committed to working with organizations like Microsoft and the broader community to identify critical vulnerabilities across the machine learning supply chain. This framework is a first step in helping to bring communities together to enable organizations to think about the emerging challenges in securing machine learning systems more holistically.”

This initiative is seen as the first step in empowering security teams to defend against attacks on machine learning systems, with the framework systematically organising the techniques used by adversaries. These tabulated tactics and techniques will be available to cyber security professionals as a resource they can use to monitor strategies around protecting their businesses’ machine learning deployments.

The matrix is structured like the ATT&CK framework, another widely-adopted cyber security framework, so that security analysts don’t have to learn anything new or different to understand how to manage machine learning threats. 

Microsoft is also seeding the framework with a curated set of vulnerabilities and adversary behaviours that itself and MITRE have betted to be effective against production systems. Analysts can, therefore, focus on realistic and tangible threats to machine learning systems rather than abstract or hypothetical dangers.

Featured Resources

How to scale your organisation in the cloud

How to overcome common scaling challenges and choose the right scalable cloud service

Download now

The people factor: A critical ingredient for intelligent communications

How to improve communication within your business

Download now

Future of video conferencing

Optimising video conferencing features to achieve business goals

Download now

Improving cyber security for remote working

13 recommendations for security from any location

Download now

Recommended

IT security awareness and training firm KnowBe4 acquires MediaPRO
Acquisition

IT security awareness and training firm KnowBe4 acquires MediaPRO

3 Mar 2021
High-risk email security threats increased by 32% last year
phishing

High-risk email security threats increased by 32% last year

3 Mar 2021
The top 12 password-cracking techniques used by hackers
Security

The top 12 password-cracking techniques used by hackers

3 Mar 2021
Microsoft Exchange targeted by China-linked hackers
zero-day exploit

Microsoft Exchange targeted by China-linked hackers

3 Mar 2021

Most Popular

Star Alliance passenger data stolen in SITA data breach
data breaches

Star Alliance passenger data stolen in SITA data breach

5 Mar 2021
I went shopping at Amazon’s till-less supermarket so that you don’t have to
automation

I went shopping at Amazon’s till-less supermarket so that you don’t have to

5 Mar 2021
How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

26 Feb 2021