Understanding AI in Cybersecurity and Secure AI

This book presents an overview of the emerging topics in Artificial Intelligence (AI) and cybersecurity and addresses the latest AI models that could be potentially applied to a range of cybersecurity areas. Furthermore, it provides different techniques of how to make the AI algorithms secure from adversarial attacks. The book presents the cyber threat landscape and explains the various spectrums of AI and the applications and limitations of AI in cybersecurity. Moreover, it explores the applications and limitations of secure AI. The authors discuss the three categories of machine learning (ML) models and reviews cutting-edge recent Deep Learning (DL) models. Furthermore, the book provides a general AI framework in security as well as different modules of the framework; similarly, chapter four proposes a general framework for secure AI. It explains different aspects of network security including malware and attacks.

The book also includes a comprehensive study of various scopes of application security; categorised into three groups of smartphone, web application, and desktop application and delves into the concepts of cloud security. The authors discuss state-of-the-art Internet of Things (IoT) security and describe various challenges of AI for cybersecurity, such as data diversity, model customising, explainability, and time complexity and includes some future work. They provide a comprehensive understanding of adversarial machine learning including the up-to-date adversarial attacks and defences. The book finishes off with a discussion of the challenges and future work in secure AI.

Dr. Dilli Prasad Sharma is associated with the University of Toronto, Canada, and previously served as a Postdoctoral Fellow at the Canadian Institute for Cybersecurity, University of New Brunswick, Canada. He holds a Ph.D. in Computer Science from the University of Canterbury, New Zealand. Dr. Sharma has over a decade of experience in teaching, research, and development in Computer Science, focusing on Cybersecurity, Artificial Intelligence (AI), Machine Learning (ML), and their applications. He has published his research in top-ranked international conferences and journals, contributing significantly to these fields. His research interests include Cybersecurity, Security Metrics, Privacy-Preserving Technologies, Moving Target Defense, Smart and Safe Cities, IoT Security, Cybersecurity in Healthcare, Adversarial Machine Learning, ML Robustness, AI Security, and Responsible and Trustworthy AI/ML Applications.

Dr. Arash Habibi Lashkari, a Canada Research Chair (CRC) in Cybersecurity, holds a prominent position as an Associate Professor at the School of Information Technology. As the founder and director of the Behaviour-Centric Cybersecurity Center (BCCC) and co-founder of the Cybersecurity Cartoon Award (CSCA), with an extensive background spanning over 28 years in industry and academia, he has taught and conducted research & development at various international universities and organizations, contributing significantly to the field. Dr. Lashkari's expertise has earned him numerous accolades, including 15 international cybersecurity competition awards and three gold awards. He was also recognized among Canada's Top 150 Researchers in 2017. With a remarkable publication record, including 11 books and over 120 academic articles, his work covers diverse cybersecurity topics. He focuses on developing vulnerability detection technology to safeguard network systems against cyberattacks. He also has extensive industrial and development experience in network, software, information, and computer security.

Dr. Mahdi Daghmehchi Firoozjaei is an Assistant Professor in the Department of Computer Science at MacEwan University, Canada. Previously, he served as an Assistant Professor at the University of Windsor and as a Postdoctoral Research Fellow at the Canadian Institute for Cybersecurity (CIC). He holds a Ph.D. in Computer Engineering from Sungkyunkwan University (SKKU), Korea, and has over a decade of industry experience in cybersecurity. His experience includes leading R&D projects in OT forensics, IoT blockchain, and DNS firewall development at CIC, Canada, and working as a senior engineer in telecommunication systems at the Telecommunication Company of Iran (TCI). Dr. Firoozjaei’s research interests primarily focus on cybersecurity, covering areas such as malware analysis, digital forensics, network security, privacy-preserving techniques, and blockchain. His research contributions have been widely recognized, earning him the Best Researcher Award 2023 from SFConferences and the Best Paper Award (AINA-2015) at the AINA Conference. Additionally, he has received prestigious accolades, including the SKKU Superior Research Award 2017 (runnerup) and the SKKU Scholarship for Outstanding International Students during his Ph.D. studies.

Dr. Samaneh Mahdavifar is a postdoctoral researcher at the Data Mining and Security Lab (DMAS) at McGill University in Montreal (Canada). She received her Ph.D. in computer science from the University of New Brunswick (Canada) in 2021. Before joining McGill University, she was an AI & Cybersecurity researcher at the Canadian Institute for Cybersecurity (CIC), UNB. Her research interests include deep learning, machine learning, trustworthy AI, cybersecurity, and privacy.

Dr. Pulei Xiong serves as a Research Officer at the National Research Council Canada, where his current research is centered on robust machine learning, delving into offensive, defensive, and assessment methods with the overarching goal of developing and deploying machine learning systems resilient against adversarial attacks throughout the entire pipeline. As the Principal Investigator, he leads multiple research projects in this area in collaboration with academic and industry experts. Beyond his work in robust machine learning, Dr. Xiong's research interests extend to privacy-preserving technologies and their applications, as well as security compliance for emerging technologies. Prior to joining NRC, Pulei gained extensive experience in the cybersecurity industry. He is widely recognized as a cybersecurity consultant, renowned for his leadership in developing the Protection Profile for Mobile Devices, which stands as the first industrial security standard of its kind for mobile computing.