{"id":57895,"date":"2024-12-20T03:22:15","date_gmt":"2024-12-20T03:22:15","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/infosec-experts-divided-on-ais-potential-to-assist-red-teams\/"},"modified":"2024-12-20T03:22:15","modified_gmt":"2024-12-20T03:22:15","slug":"infosec-experts-divided-on-ais-potential-to-assist-red-teams","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/infosec-experts-divided-on-ais-potential-to-assist-red-teams\/","title":{"rendered":"Infosec experts divided on AI’s potential to assist red teams"},"content":{"rendered":"

CANALYS FORUMS APAC<\/span> Generative AI is being enthusiastically adopted in almost every field, but infosec experts are divided on whether it is truly helpful for red team raiders who test enterprise systems.<\/p>\n

“Red teaming” sees infosec pros simulate attacks to identify vulnerabilities. It’s a commonly used tactic that has been adapted to test the workings of generative AI applications by bombarding them with huge numbers of prompts in the hope some produce problematic results that developers can repair.<\/p>\n

Red teams wield AI as well as testing it. In May, IBM’s red team told<\/a> The Register<\/i> it used AI to analyze info at a major tech manufacturer’s IT estate, and found a flaw in an HR portal that allowed wide access. Big Blue’s red team reckoned AI shortened the time required to find and target that flaw.<\/p>\n

Panel prognostications<\/h3>\n

The recent Canalys APAC Forum in Indonesia convened a panel to ponder the use of AI in red teaming, but also what it means to become dependent on it \u2013 and more importantly, its legality.<\/p>\n

IBM APAC Ecosystem CTO Purushothama Shenoy suggested using AI for red teaming could be helpful “to break the system yourself in a much more ethical manner.”<\/p>\n