GPT-4 and Cybersecurity?!

Key Takeaways

hello Community welcome to April's Fool's Day today I do have a very special presentation for you can you find out if it is April Fool look here Microsoft introduces gpt4 in cyber security you might think hey wait this is the most sensitive sector of a hospital of banks of offices of government buildings insurance companies all the private data and we have now a generative AI model in cyber security well yeah why not so we have a power Activity 4 generative Ai and it looks like a simple prompt box like any other chatbot and you as a cyber security officer you are now able to ask hey what are all the security incidents in my Enterprise and chat GPT 4. from Microsoft will summarize them now isn't this amazing now of course you understand that gpd4 has to be trained on a very specific data set and the data set is here as Microsoft tells us here cyber security and infrastructure Security Agency from NIS International Institute of standard and technology in the US they have a vulnerability database and then of course Microsoft owned threat intelligence database as you know they have quite some objects here and security and cyber security sphere so if you want to know hey by the way Sarah secure what exactly is this I have here from IBM my definition and here from Cisco definition and you know sometimes it's the small the little words that you that you notice yeah IBM says cyber security is practice of protecting actively protecting critical system and Cisco says cyber security is the practice of protecting system active and then you know let's have a definition of Microsoft cyber security is it helps to protect your critical system so you see it just helps you to protect it it's not like with Cisco it's protecting no it helps to protect your system so you might say okay so so let's have a look at this beautiful new April fools system so U.S security professional you can you ask in the prompt here where you can have now ICL you're in the prompt you have in context learning so from all your system the code snippet for analysis you input it and then you can ask the system for a reply and of course Microsoft tells you hey all prompts and responses of your system so all the most vulnerable information of all your open i o ports of when the firewall is done or whatever happens to backdoors in your it infrastructure all this is safe we keep a copy of it so you are safe to go so if you have an audit now we have a complete audit trail of all commands that are wrong all system errors that we get back from your very critical infrastructure so isn't that great I think the beauty is that Microsoft now added here distributed fuel chatbot that it can write code and analyze code for cyber security it's Suite of products enabled by gpt4 so and this is now really this is a game change I would say here an April Fool's Day because it looks like a prompt you know like like Bing you have no but Microsoft of course limited this gpd4 system just to security related queries so it it stated that if you ask it for for the weather it will not be able to answer Disney so we have here our prompt from this beautiful gpd4 security system so here you insert either you have if you have Microsoft security systems operational they will input here automatically here the security messages from your system hey firewall is down hey phishing attack notice or hey malware detected or whatever you have and then since it's automatically feeding your prompt you can then ask here as a professional hey what shall I do now and the system learns and just I think this is gorgeous because finally you have here cyber security managed no and as a professional or April fools there now so Microsoft positioned it in a way for it departments to handle staff shortages and skills gaps so because hey I mean of course the cyber security field is critical for a bank or for a hospital or for I don't know insurance companies so and there's a worldwide gap between the cyber security jobs that are there and the workers that are missing in this Gap is 3.4 million people are missing Wasabi security so hey you can have here if you have a staff shortage in your company you can handle it is stuff shortages here and and now and now comes the best partner now you have here you can tpd4 will assist now your employees who are new you know are less familiar maybe with the security of an I.T infrastructure of a complete company of a Bank of America they they help you here with specific tasks because 254 will automate now all the cyber security processes and my goodness it is so beautiful to live in those times when you can completely rely on Microsoft for cyber security and um um and and maybe you should read here that Microsoft says it doesn't mean that all will get these things right I mean maybe you know I mean the Microsoft vice president and a security architect for the whole Corporation says we know sometimes this model gets things wrong so hey it's just cyber security so so we are offering the ability to make sure that that we as Microsoft we have feedback that says here the vice president because it says the feedback loop is a lot more involved now now in this than just a thumbs up but it comes down that it's used for Microsoft Bing because it's just cyber security you know oh you're a sensible data everything you have for your compliance office here data privacy personal privacy data maybe your bank data it's it's a little bit more complicated to say than that because there's there's a lot of ways it could go wrong I mean what it means a lot of ways it could go wrong so but this is just that I mean Microsoft will let users respond with exactly what's wrong too to get a better understanding of any hallucinations of the eye systems I mean that they forgot to mention that there is then a company that has command and maybe now all the firewalls are down so Microsoft will let users respond with exactly what's wrong with the cyber security to get a better understanding of any hallucinations of the system I mean it's great no I mean hello yeah yippee it's April Fool's Day so security information is never fed back into Microsoft Big Data Lakes they have still data links they don't have Delta Lakes oh come on Microsoft to train other Microsoft AI models so wait a minute secure the information so your most sensitive security information of your vulnerability spots of your it infrastructure of the complete company is never fed back into Microsoft other AI models so yeah of course it's fed back into the AI security model but otherwise how would Microsoft learn because you are a tester here for Microsoft and your company is here beta tester that the system can learn from their vulnerabilities that happen in real time to your company so but anyway reducing the chance for confidential information from one company to end up as an answer to a question within a different company uh okay so if you ask now in chat gpt4 hey can you tell me about the security problems Bank of America is having today you do not get the answer yeah I hope Port 7456 is currently open and you have unlimited access to personal data this you see this is a professional system so so yeah but but of course all your sensitive security data is fed back to train their GPD system on cyber security and of course Microsoft does not trust you that you would be able to host the GPT gpd4 module so all data is transfer back to the main Microsoft supercomputer Center where all your data are there for Microsoft on their server for their analysis for learning their cyber security AI systems so um yeah it's it's ABS I'm sure it's safe so because they do it here for the for the good of the uh oh they they announced that the cyber security is now at 20 20 billion dollar business so maybe there are some commercial interests but I'm sure that they they care so so what about the responsibility of the creator of now distributive four security code look because jet GPT or gpd4 gives you back a security code it tells you hey you can try this code maybe then maybe then you you can counter attack the the digital attack so so how it is about the responsibility of chat GPT that you because you are an overworked cyber security and unlearned officer that you entered now this Champion gpd4 code in the it networks server infrastructure um yes Microsoft has not yet responded but I'm sure that there's a complete responsibility Microsoft will take for um so uh let's go on to the last slide and I would like to tell you here uh while natural language AIS which gpd4 can fill in the gaps for overworked and under trained Personnel in the cyber security sector this is where you want to have the undertrained Personnel for your it infrastructure of the complete cooperation this is the place to have them so so to to keep human eyes on the work before the gpd4 code goes live so what do you mean you mean you mean that suddenly you need a cyber security professional to check gpt4 responses so you have to pay GPT for cyber security plus a professional cyber security officers wow I'm so so glad that it's April Fool's Day because otherwise you would think um okay yeah because AI can still return force a misleading results hey who's saying that come on because uh yeah okay there a CEO of a real security company is pointing out that there might be there might be concerns about cyber security decision makers I mean it does not fit at all currently here in this beautiful presentation for Microsoft so I mean he's talking about limitations of AI I mean that's it that's a strange wording I see it here the first time so so but I mean it's I'm sure you and the best hand for cyber security gpd4 handling your security network all your private personal data your financial data your insurance data your your corporate secret I mean I'm sure yeah because yeah you should protect assets and fulfill compliance obligations of the company so as it was so nice here to talk with you here on April Fool's Day yeah but but Microsoft integrated a generative AI tpt4 in an active cyber security defense system find out if it's an April's Fool's joke or not