Synthetic intelligence (AI) has lengthy been a cornerstone of cybersecurity. From malware detection to community visitors evaluation, predictive machine studying fashions and different slender AI functions have been utilized in cybersecurity for many years. As we transfer nearer to synthetic common intelligence (AGI), AI’s potential to automate defenses and repair vulnerabilities turns into much more highly effective.
However to harness such advantages, we should additionally perceive and mitigate the dangers of more and more superior AI being misused to allow or improve cyberattacks. Our new framework for evaluating the rising offensive cyber capabilities of AI helps us do precisely this. It’s probably the most complete analysis of its form up to now: it covers each section of the cyberattack chain, addresses a variety of menace varieties, and is grounded in real-world knowledge.
Our framework allows cybersecurity consultants to establish which defenses are essential—and tips on how to prioritize them—earlier than malicious actors can exploit AI to hold out refined cyberattacks.
Constructing a complete benchmark
Our up to date Frontier Security Framework acknowledges that superior AI fashions may automate and speed up cyberattacks, doubtlessly reducing prices for attackers. This, in flip, raises the dangers of assaults being carried out at larger scale.
To remain forward of the rising menace of AI-powered cyberattacks, we’ve tailored tried-and-tested cybersecurity analysis frameworks, comparable to MITRE ATT&CK. These frameworks enabled us to judge threats throughout the end-to-end cyber assault chain, from reconnaissance to motion on aims, and throughout a variety of doable assault eventualities. Nonetheless, these established frameworks weren’t designed to account for attackers utilizing AI to breach a system. Our strategy closes this hole by proactively figuring out the place AI may make assaults quicker, cheaper, or simpler—as an illustration, by enabling totally automated cyberattacks.
We analyzed over 12,000 real-world makes an attempt to make use of AI in cyberattacks in 20 international locations, drawing on knowledge from Google’s Menace Intelligence Group. This helped us establish widespread patterns in how these assaults unfold. From these, we curated a listing of seven archetypal assault classes—together with phishing, malware, and denial-of-service assaults—and recognized important bottleneck phases alongside the cyberattack chain the place AI may considerably disrupt the normal prices of an assault. By focusing evaluations on these bottlenecks, defenders can prioritize their safety assets extra successfully.
Lastly, we created an offensive cyber functionality benchmark to comprehensively assess the cybersecurity strengths and weaknesses of frontier AI fashions. Our benchmark consists of fifty challenges that cowl the complete assault chain, together with areas like intelligence gathering, vulnerability exploitation, and malware improvement. Our goal is to offer defenders with the flexibility to develop focused mitigations and simulate AI-powered assaults as a part of crimson teaming workouts.
Insights from early evaluations
Our preliminary evaluations utilizing this benchmark recommend that in isolation, present-day AI fashions are unlikely to allow breakthrough capabilities for menace actors. Nonetheless, as frontier AI turns into extra superior, the sorts of cyberattacks doable will evolve, requiring ongoing enhancements in protection methods.
We additionally discovered that present AI cybersecurity evaluations typically overlook main facets of cyberattacks—comparable to evasion, the place attackers disguise their presence, and persistence, the place they preserve long-term entry to a compromised system. But such areas are exactly the place AI-powered approaches could be significantly efficient. Our framework shines a lightweight on this difficulty by discussing how AI might decrease the limitations to success in these elements of an assault.
Empowering the cybersecurity neighborhood
As AI techniques proceed to scale, their potential to automate and improve cybersecurity has the potential to rework how defenders anticipate and reply to threats.
Our cybersecurity analysis framework is designed to assist that shift by providing a transparent view of how AI may also be misused, and the place present cyber protections might fall quick. By highlighting these rising dangers, this framework and benchmark will assist cybersecurity groups strengthen their defenses and keep forward of fast-evolving threats.
![How One Model Solved the Advertising Attribution Puzzle [Video]](https://blog.aimactgrow.com/wp-content/uploads/2025/03/marketing-attribution-model-120x86.png)
