麻豆传媒

Russia and China are staging 鈥渞elentless鈥� cyberattacks against the UK using AI, according to one of the nation鈥檚 top spy chiefs. But AI is also being used to help defend against such attacks.

, director of operations at the National Cyber Security Centre (NCSC) 鈥� the government department tasked with securing the nation鈥檚 IT infrastructure 鈥� says the UK鈥檚 four main cyber adversaries 鈥� Russia, China, North Korea and Iran 鈥� are all using AI to boost their ability to attack the country.

鈥淭hey don鈥檛 need sleep, coffee, food or anything like that,鈥� says Chichester. 鈥淎I is certainly being used by all our adversaries.鈥�

NCSC was formed 10 years ago this month by amalgamating a disparate group of departments that all had overlapping aims to protect against cyberattacks. Chichester says that, over that decade, cyberattacks have become a standard part of the intelligence activity of nation states.

鈥淚t feels more relentless now than it did 10 years ago,鈥� says Chichester. 鈥淭his is now an absolutely critical part of covert statecraft, and we obviously live in a world that is more uncertain and geopolitically there is more tension. So that will manifest in the cyber domain and that will manifest in our workload. All of a sudden [with AI], the productivity of their operations is certainly increasing.鈥�

In recent months, a string of stories about AI models inadvertantly escaping test environments and hacking computers in the real world have emerged from large AI companies. And the use of AI models by security companies paid to break into clients鈥� machines to test defences has become commonplace. These models can not only design new types of attack, but they can carry them out at astonishing pace and operate without rest.

Chichester says that AI is being used in all stages of the 鈥渃yber kill chain鈥�, from reconnaissance to developing a vulnerability to actually carrying out attacks on a target. He also warns that when humans staged attacks, there was a de facto limit to how much intelligence or data they could steal, but in a world where AI can carry out attacks that limiting factor is gone.

鈥淲hat you鈥檙e seeing is always something new. Because if they don鈥檛 get it, they鈥檙e gonna try something else,鈥� says Chichester. 鈥淣o two days are the same; you鈥檙e always seeing different kinds of attack. You鈥檙e always trying to defend against things.鈥�

Their aims vary, from espionage to economic advantage to disruption and, in the case of North Korea, simple financial crime and fraud.

Chichester would not be drawn on the extent that the UK takes part in similar attacks, but says that 鈥渢here are capabilities that are avowed and the UK uses鈥�. The secretive National Cyber Force is a joint operation between the UK Ministry of Defence and GCHQ (the UK鈥檚 cybersecurity agency), which has offensive cyber capabilities.

However, Chichester says that NCSC is open about using commercial frontier models in its work, and in developing its own AI tools.

鈥淏uilding an LLM [large language model] in a way that you might look at some of the frontier models obviously takes a ridiculous amount of computing and machinery, but building smaller models that do particular specific things is a very different proposition,鈥� says Chichester. 鈥淔or instance, in the way that we do malware research or malware engineering investigations, there are elements of artificial intelligence in the tooling and the systems we build, and that鈥檚 been in there for a long time 鈥� but it鈥檚 very bespoke, it鈥檚 very specific to that task.鈥�