Intelligent CISO Issue 1 - Page 75

tools from different vendors can detect it. Infected machines leveraging Coinhive is a latest example, browser plugins that infect end-user machines to hijack their CPU cycles to mine for virtual currency. “This process is rapidly accelerating the time from concept to delivery of new malware that is both more malicious and more difficult to detect and stop. “Once true, AI is integrated into this process, offence vs defence (time to breach vs time to detect/ protect) will be reduced to a matter of milliseconds rather than the hours or days it does today.” Jacobsz remarks that phenomenal innovation in digital has led to many positive elements in both business environment and personal life. “Unfortunately, it has also given opportunity to criminal acts that only a few decades – sometimes as short as a year – were unheard of,” he said. are now finding themselves in an arms race with cybercrime organisations. This puts them in a difficult position because, while they need to trust new connected systems that provide both increased intelligence and security in order to survive, the risks are real.” The dark web and cybercrime economy offer new services using automation The blog points out: “We expect to see new service offerings from the | Issue 01 dark web as Crime-as-a-Service organisations use new automation technology for their offerings. “We are already seeing advanced services being offered on dark web marketplaces that leverage machine learning. For example, a service known as FUD (fully undetected) is already part of several offerings. This service allows criminal developers to upload attack code and malware to an analysis service for a fee. Afterwards, they receive a report as to whether security “As such, each innovation needs to be seen from every possible angle, both the good and the bad, to provide users with the finest and most secure solution.” This essentially means that security intelligence, automation and innovation needs to be as fast and on par with every digital innovation. The blog concludes: “Like it or not, this is a winner-takes-all scenario. Organisations that fail to prepare now may not be able to catch up once it moves to the next level of sophistication.” u 75