Questions to ask when using AI to find IT vulnerabilities

The National Cyber Security Centre (NCSC) has published a new blog on questions to ask when using AI models to find vulnerabilities in your IT system.

Cyber criminals are increasing the use of Artificial Intelligence (AI) to enhance their ability to make cyber-attacks. However, AI can also be used by businesses to discover vulnerabilities in their own systems first and shore them up.

Before throwing caution to the wind though, the NCSC recommends considering some important questions. These are:

• What are you trying to achieve by using AI?
• Is using AI the best way to improve security?
• Do I have a process to manage any vulnerabilities that AI finds?
• How should I prioritise vulnerabilities?
• What are the risks when using AI to find vulnerabilities?
• What AI model should I use?
• Where should I start?
• What’s my long-term plan to deal with new AI models?
• Where do I need to invest in people?
• Do I know how everything we develop or use is patched?

To read the blog in full, see: https://www.ncsc.gov.uk/blogs/10-questions-ask-using-ai-models-find-vulnerabilities