Microsoft spearheads industry-wide charter against AI cyber attacks

Security professionals can rely on the framework to fight cyber attacks targeting corporate machine learning systems

Some of the tech industry’s biggest names, including IBM and Nvidia, have teamed up with Microsoft to launch an industry-focused open framework to empower security analysts to fight against advanced cyber threats.

The Adversarial ML Threat Matrix sees more than 11 organisations, as well as the not-for-profit MITRE, pool resources into drafting a playbook for detecting, responding to and remediating threats against machine learning systems.

With the rise of AI and machine learning systems being deployed by businesses across the world, cyber criminals and hackers are increasingly pivoting to finding ways to disrupt these business-critical platforms. 

There’s a significant gap between how these systems are being increasingly targeted and how vulnerable they are due to a lack of protection, according to Microsoft, which is spearheading these efforts.

“When it comes to Machine Learning security, the barriers between public and private endeavors and responsibilities are blurring; public sector challenges like national security will require the cooperation of private actors as much as public investments,” said director of machine learning research with MITRE, Mikel Rodriguez. 

“So, in order to help address these challenges, we at MITRE are committed to working with organizations like Microsoft and the broader community to identify critical vulnerabilities across the machine learning supply chain. This framework is a first step in helping to bring communities together to enable organizations to think about the emerging challenges in securing machine learning systems more holistically.”

This initiative is seen as the first step in empowering security teams to defend against attacks on machine learning systems, with the framework systematically organising the techniques used by adversaries. These tabulated tactics and techniques will be available to cyber security professionals as a resource they can use to monitor strategies around protecting their businesses’ machine learning deployments.

The matrix is structured like the ATT&CK framework, another widely-adopted cyber security framework, so that security analysts don’t have to learn anything new or different to understand how to manage machine learning threats. 

Microsoft is also seeding the framework with a curated set of vulnerabilities and adversary behaviours that itself and MITRE have betted to be effective against production systems. Analysts can, therefore, focus on realistic and tangible threats to machine learning systems rather than abstract or hypothetical dangers.

Featured Resources

Managing security risk and compliance in a challenging landscape

How key technology partners grow with your organisation

Download now

Evaluate your order-to-cash process

15 recommended metrics to benchmark your O2C operations

Download now

AI 360: Hold, fold, or double down?

How AI can benefit your business

Download now

Getting started with Azure Red Hat OpenShift

A developer’s guide to improving application building and deployment capabilities

Download now

Recommended

Weekly threat roundup: SAP, Windows 10, Chrome
vulnerability

Weekly threat roundup: SAP, Windows 10, Chrome

21 Jan 2021
Biden nominees highlight tough cyber security challenges
cyber security

Biden nominees highlight tough cyber security challenges

20 Jan 2021
Report: Security staff excluded from app development
cyber security

Report: Security staff excluded from app development

20 Jan 2021
Best MDM solutions 2020
mobile device management (MDM)

Best MDM solutions 2020

20 Jan 2021

Most Popular

Citrix buys Slack competitor Wrike in record $2.25bn deal
collaboration

Citrix buys Slack competitor Wrike in record $2.25bn deal

19 Jan 2021
How to recover deleted emails in Gmail
email delivery

How to recover deleted emails in Gmail

6 Jan 2021
SolarWinds hackers hit Malwarebytes through Microsoft exploit
hacking

SolarWinds hackers hit Malwarebytes through Microsoft exploit

20 Jan 2021