IGF 2023 WS #33 Ethical principles for the use of AI in cybersecurity

Description:

We are currently witnessing a swift development of artificial intelligence (AI) which has the potential to bring many benefits to the world, including the strengthening of cybersecurity. AI algorithms help with rapid identification and response to security threats and automate and enhance the accuracy of threat detection. While numerous general ethical principles for AI have already been developed (e.g. in 2021, the UNESCO adopted Recommendations on the Ethics of AI), there is currently no specific set of ethical principles for the development, distribution, and use of AI components in cybersecurity. Due to the particular opportunities but also risks of AI in cybersecurity, there is a need for a broad dialogue on such specific ethical principles. For this reason, Kaspersky has developed initial ideas on which aspects should be taken into account here. These will be discussed and further developed in the workshop. Some key ethical principles could be as follows: • The human must remain in control: While AI systems are designed to operate in a self-contained and autonomous mode, human control remains as an important element of their implementation. • Developed and used for cybersecurity: The one and only goal of AI systems developed for digital security is to provide users with the best cybersecurity solutions and services that cannot be used to negatively impact any system. • Safety comes first: While designing and developing AI systems for cybersecurity, it has to be ensured that their operation does not negatively affect users or their infrastructure. • Be transparent: Openness and readiness for dialogue with users and stakeholders as well as clearness in the model of operations of algorithms should be key goals. • Maintain privacy: Training data play a vital role in the implementation of AI systems. Processing such data must be based on respecting and protecting people's privacy.