Autonomous Adversaries: AI-driven Conflicts in Cybersecurity Systems

Abstract

Artificial Intelligence (AI) will create new opportunities, while also creating new challenges for those within the cybersecurity profession as the cybersecurity landscape continues to evolve. The purpose of this paper is to provide a conceptual framework of the evolving dynamics between offensive AI agents (Red AI) and defensive AI agents (Blue AI) taking place in the same cyberspace battlefield. The methods utilized by Red AI to compromise digital assets are varied, including but not limited to, network scanning, exploit execution, and adversarial machine learning. Red AI takes advantage of self-learned strategies (generated by AI) in gaining total control over an organization’s networks, devices, data, and applications. Blue AI uses predictive analytics, anomaly detection, and autonomous response strategies to identify, block, and adapt to those attacks. The main battlefield that exists between Red AI and Blue AI is in a cyberspace which included the main components of cyberspace (i.e., Networks, Applications and Data Traffic). This research emphasizes the need for continuing to advance the development of defensive AI technologies to counter Red AI initiated attacks, while also providing a foundation for simulating this adversarial situation (Red AIs attack) against the understanding of future cybersecurity incidents. The outcome of this research is to assist with the enhanced development of AI driven cyber defense systems which ultimately provide a higher level of security for our Network Environment.