Entries by Information Analyst
How the new Instegogram threat creates liability for organizations
How the new Instegogram threat creates liability for organizations
Insights
CSO Online
How the new instegogram threat creates liability for organizations
December 26, 2023
By Daniel Garrie, Jennifer Deutsch and Peter Halprin
Organizations might be at risk of liability for images containing malicious code they post on social media even if they were unaware of it.
Writing in 2017, one of the authors of this article noted that, “Social media networks represent the largest, most dynamic risk to organizational security and allocating liability.” Unfortunately, with the growth of social media networks since then, this threat has only increased. First identified in 2016, this risk combines digital image steganography and social media in the corporate environment. While neither steganography nor social media are new, it is novel to combine both as a tool for malware distribution.
What is Instegogram?
This scheme, known as “Instegogram,” is the use of social networks, Instagram in particular, as a threat actor’s command-and-control site. Instegogram is unique in that “once the remote system is compromised, encoded images can be posted from the command machine using Instagram’s API. The remote system will download the image, decode it, execute the encoded commands, encode the results in another image, and post back to Instagram.” Instegogram was created for academic purposes, but its potential use as part of a malware attack poses the question of who would be liable for such an attack.
Instegogram attacks could remove liability protections
Under Section 230 of the Communications Decency Act (CDA), companies that offer web-hosting services are typically shielded from liability for most content that customers or malicious users place on the websites they host. However, such protection may cease if the website controls the information content. A company that uses a social media network to create the picture or develop information would arguably control that information and thus may not be immune. That is, if a service provider is “responsible, in whole or in part, for the creation or development of the offending content,” its actions could fall outside the CDA’s protections.
To read the full article, go to CSO Online
Preparing Law Students For A New, AI-Assisted Legal World
Preparing Law Students For A New, AI-Assisted Legal World
Insights
Law360
Preparing Law Students For A New, AI-Assisted Legal World
November 15th, 2023
By Daniel Garrie, Ryan Abbott and Karen Silverman
The legal profession is no stranger to change. From the invention of the printing press to the dawn of the internet, each technological revolution has reshaped how legal professionals work.
Today, another seismic shift is underway as artificial intelligence emerges as a powerful tool in the legal landscape.
A recent study from the University of Minnesota Law School highlighted this transformation, showcasing how AI — specifically, GPT-4, a large language model — aided low-performing law students in improving their exam scores on multiple-choice questions. However, with AI assistance, high-performing students saw a decline in their essay scores.[1]
The findings suggest a potential equalizing effect of AI within the legal profession, which hints at the broader implications of integrating AI in legal education.
This article will delve into the convergence of legal education and AI, exploring the methodologies to train future lawyers with AI and the myriad challenges that may ensue.
The Role of AI in Legal Education
Law schools across the globe are beginning to integrate AI into their curricula, aiming to prepare students for a future where AI plays a central role in legal practice. Here are some ways that AI can and is transforming legal education.
Personalized Learning
AI-powered adaptive learning platforms can give students a more tailored learning experience catering to their strengths and weaknesses. These platforms can suggest or generate personalized content and exercises by analyzing students’ past performance and learning preferences, improving educational outcomes.
Virtual Simulation and Scenario-Based Learning
AI can facilitate immersive and interactive learning experiences through virtual simulations and chatbots. These platforms can simulate real-world legal scenarios and provide instant feedback, allowing students to develop improved problem-solving and critical thinking skills in a controlled setting.
To read the full article, go to Law360
Don’t Rush to AI and ML Without a Governance Framework
Don’t Rush to AI and ML Without a Governance Framework
Insights
Security Current
Don’t Rush to AI and ML Without a Governance Framework October 26, 2023
By David Cass
The rapid adoption of artificial intelligence and machine learning yields tremendous benefits. But as with any transformational technology that can affect human lives and societal structures, there are attendant governance challenges.
Effective governance of AI and ML requires a blueprint to ensure these technologies are used safely, ethically, and responsibly. Understanding the risks associated with these technologies, such as biases, potential misuse, and privacy concerns, is essential. A governance framework will help ensure our organizations have transparency and accountability in their implementation of AI and ML, and they promote the responsible use of these technologies to avoid misuse or unintended consequences.
Having a framework also helps to build trust among the general public and the organization’s stakeholders regarding the deployment of AI and ML. You need to have a standard against which you will be measured.
Key components you need for an effective AI/ML governance framework include:
* Clear objectives. There should be well-defined goals and principles to ensure that any AI or ML introduced is fair, reduces bias, and adheres to the ethical principles you define.
* Clearly defined roles and responsibilities. You want to make sure that you delineate the roles and responsibilities of those involved in developing, deploying, monitoring, and testing AI models.
* Data management. Guidelines on data collection have to be clearly spelled out. What data are being collected? How are data being stored? How are data being processed? How are they being used?
*Implementing transparency. How do you document the processes? How do you document the algorithms and the data sources that are used? This will help you explain the model and potentially explain decisions it may make if you’re called before a board of directors, congressional committee, or some other regulatory or governing body. You need to be able to reconstruct what happened, not just from a regulatory point of view, but to ensure there’s nothing wrong with the model.
To read the full article, go to Security Current
Ethical Principles Must Undergird AI
Ethical Principles Must Undergird AI
Insights
Security Current
Ethical Principles Must Undergird AI
November 1, 2023
By David Cass
Artificial intelligence needs to be deployed in a way that benefits humanity. That requires looking beyond the short-term model to long-term use and AI’s widescale impact on the broader society.
As the use of artificial intelligence and machine learning grows, so, too, will the deployment of automated decision-making systems that could greatly impact well-being, privacy, and livelihood. Organizations must, therefore, develop ethical principles to guide the design, development, and deployment of AI and ML systems to ensure that the power of these technologies is used responsibly.
This is a two-stage process. Stage one is developing the principles. Stage two defines the various core AI ethics principles that will guide the organization.
When developing the principles, the first step is to get multidisciplinary input from a mixed community of ethicists, technologists, legal experts, and sociologists. Representatives of affected communities — for example, health care or finance — also have to be involved to guarantee there’s a comprehensive understanding of the potential implications for its use.
The second step would be a broader public consultation if it’s an AI or ML model that impacts society at large. Public consultations, such as a town hall, can offer insights from ordinary citizens who might be affected while helping to foster trust in the use of AI and ML.
Regularly reviewing ethical principles is critical because AI is evolving so quickly, and they need to remain relevant.
It’s also important to put a feedback mechanism in place to ensure that the AI developers, users, and affected individuals can provide observations and critiques on the AI systems and their implications once they’re deployed. It’s important to know whether the system is working as expected.
To read the full article, go to Security Current
X-Ways Forensics: How to Make an Image
X-Ways Forensics: How to Make an Image
Guide
About This Video
What our Video Offers: The video tutorial is a step-by-step walkthrough that covers every aspect of the imaging process in X-Ways Forensics. We delve into each option available during the imaging process, providing clear explanations of what these options mean and how they can impact your forensic investigation. Here’s a glimpse of what you can expect:
- Step-by-Step Guide: We walk you through the entire process of creating a digital image using X-Ways, ensuring you grasp each step’s nuances.
- Demystifying Options: X-Ways offers numerous options when imaging. We break down each option, explaining its significance and when to use it. Whether it’s understanding AES encryption or preventing unencrypted copies, we’ve got you covered.
- Best Practices: The video emphasizes industry best practices, ensuring that your forensic investigations maintain the highest standards of integrity and professionalism.
Why Watch This Video: In the rapidly evolving landscape of digital forensics, staying updated with the latest tools and techniques is crucial. Our video tutorial provides you with the current knowledge you need to confidently use X-Ways Forensics, one of the most powerful tools in the industry, for your forensic imaging needs.
This video is brought to you by Legal Cyber Academy.
Cutting Costs, Not Corners: The Impact of Artificial Intelligence & Machine Learning on Attorneys and Clients Alike
Cutting Costs, Not Corners: The Impact of Artificial Intelligence & Machine Learning on Attorneys and Clients Alike
Insights
Daily Journal
We stand on the brink of a transformative era. The legal sector, traditionally resistant to change, is now embracing a powerful ally – artificial intelligence (AI). With its impressive ability to automate tasks, assist in case analysis, and deliver substantial cost savings, AI is proving beneficial for attorneys, their clients, and parties without legal representation.
The term ‘AI’ might conjure visions of sci-fi movies and complex techno-babble. However, in reality, its principle is straightforward—emulating human intelligence in machines programmed to learn and problem-solve. For the legal field, this means saving time and money, making services accessible to many more people.
The Legal Profession’s Silent Partner
To understand the potential of AI in legal practice, we need to decode its role in everyday legal work. Time is a valuable commodity for lawyers. Lawyers spend most of their time not in dramatic courtroom showdowns, but in meticulous document review – reading, interpreting, cross-referencing.
Now imagine an AI-powered software tool capable of comprehending and analyzing these documents at an incredible pace. The prospect is tantalizing for lawyers, offering unparalleled speed and accuracy. These programs can sift through thousands of pages of legal text, identifying relevant information and drawing connections faster than any human. With AI handling these mundane tasks, attorneys can redirect their energy and time to other crucial aspects of their cases.
A Strategic Advantage for Legal Firms
For law firms, the benefits of AI go beyond mere time savings. Incorporating AI into daily operations is a strategic move, allowing firms to differentiate themselves from competitors.
To read the full article, go to Daily Journal