This fluff piece has quite the pie-in-the-sky attitude toward the blue-teaming applications of AI.
Some commentators predict that future AI models will unearth entirely new forms of vulnerabilities that defy our current comprehension, but we don’t think so.
How reassuring.
The defects are finite, and we are entering a world where we can finally find them all.
Could’ve said the same thing when enterprise anti-malware came onto the scene decades ago, but the reality was it was just another vector for the arms race between the red team and the blue team. The author seems to put a lot of stock in the whole “the blue team has access to these AI tools that the red team doesn’t currently have access to” argument, which kinda ignores the fact that that reality is simply not going to last.
I could be wrong, but any article suggesting “zero-days are numbered” doesn’t pass the smell test.
Perhaps I misunderstood the author’s intent. Though even if their position is that the red team and blue team will be on a more even playing field when both have access to AI tools, I’m not sure I can agree with that assessment. The asymmetrical nature of offense and defense isn’t fundamentally changed by the advent of AI tools. While the current slate of AI tools may be uniquely more useful for finding and patching bugs, I can’t imagine a future in which AI tools aren’t also being tailored for exploiting and penetrating. The red team isn’t just going to sit around and not adapt the available toolset to favor their use cases as well.
Much like the arms race between anti-virus development and virus development, there will be defensive AI development and offensive AI development. Similar to what we’ve already seen with the arms race between LLMs and software that can detect if something was written by an LLM.