Deception and Detection: Why AI Empowers Cyber Defense over Offense

Professor Lennart Maschmeyer from the Georgia Institute of Technology will give a presentation at the MIT Security Studies Program's Wednesday Seminar. Summary: Many have predicted that AI will revolutionize cyber conflict by enabling offense automation for faster, stealthier, and more damaging attacks. But the revolution has not happened, even though highly capable AI models have been available for several years. The article that Professor Maschmeyer presents in this seminar explains why: There is a gap between defense and offense when it comes to the limits on what AI can do. Cyber offense requires creative deception to burrow into systems and produce desired effects before being discovered. Cyber defense, by contrast, strives to detect such intrusions before they cause harm. AI models struggle with the creativity and deception necessary for offensive operations, but they excel at the pattern recognition that is key for defensive operations - and this relative advantage of defensive tasks increases as the stakes increase.