Stopping cyberattacks. No human necessary

Even so, that has protected Las Vegas’ network and thousands of sensors for the last 18 months.

Since last February, Darktrace has defended the city from cyberattacks, around the clock. That comes in handy when you have only three staffers handling cybersecurity for people, 3,000 employees and thousands of online devices. It was worse when Sherwood joined two years ago.

“That was the time where we only had one security person on the team,” Sherwood tells me. “That was when I thought, ‘I need help and I can’t afford to hire more people.'”

He’d already used Darktrace in his previous job as deputy director of public safety and city technology in Irvine, California, and he thought the software could help in Las Vegas. Within two weeks, Darktrace found malware on Las Vegas’ network that was sending out data.

“We didn’t even know,” Sherwood says. “Traditional scanners weren’t picking it up.”  

Pattern recognition

I’m standing in front of a tattoo parlor in , darknet market markets onion a little more than 4 miles from Caesars Palace. Across the street, I see three shuttered stores next to two bail bonds shops.

I’m convinced the taxi driver dropped me off at the wrong location.

This is supposed to be Vegas’ $1 million Innovation District project? Where are the in the area? Or the ?

I look again at the Innovation District map on my phone. I’m in the right place. Despite the rundown stores, trailer homes and empty lots, this corner of downtown Vegas is much smarter than it looks.

That’s because hidden on the roads and inside all the streetlights, traffic signals and pipes are thousands of sensors. They’re tracking the air quality, controlling the lights and water, counting the cars traveling along the roads, and providing Wi-Fi.

Officials chose the city’s rundown area to serve as its Innovation District because they wanted to redevelop it, with help from technology, Sherwood says. There’s just one problem: All those connected devices are potential targets for a cyberattack. That’s where Darktrace comes in.

Sherwood willingly banks on Darktrace to protect the city’s entire network because the software comes at machine learning from a different angle. Most machine learning tools rely on brute force: cramming themselves with thousands of terabytes of data so they can learn through plenty of trial and error. That’s how IBM’s Deep Blue computer learned to defeat Garry Kasparov, the world chess champion, in a best-of-seven match in 1997. In the security world, that data describes malware signatures — essentially algorithms that identify specific viruses or worms, for instance.

Darktrace, in contrast, doesn’t look at a massive database of malware that’s come before. Instead, it looks for patterns of human behavior. It learns within a week what’s considered normal behavior for users and sets off alarms when things fall out of pattern, like when someone’s computer suddenly starts encrypting loads of files.

Rise of the machines?

Still, it’s probably too soon to hand over all security responsibilities to artificial intelligence, says  , a security professor and director of Carnegie Mellon University’s CyLab Security and Privacy Institute. He predicts it’ll take at least 10 years before we can safely use AI to keep bad things out.

“It’s really easy for AI to miss things,” Brumley tells me over the phone. “It’s not a perfect solution, and you still need people to make important choices.”

Brumley’s team last year built an AI machine that won beating out other AI entries. A few days later, their contender took on some of the world’s best hackers at Defcon. They came in last.

Sure, machines can help humans fight the scale and speed of attacks, but it’ll take years before they can actually call the shots, says Brumley.

That’s because the model for AI right now is still data cramming, which — by today’s standards — is actually kind of dumb.

But it was still good enough to , making him the de facto poster child for man outsmarted by machine.

“I always remind people it was a rematch, because I won the first one,” he tells me, chuckling, while sitting in a room at Caesars Palace during Defcon. Today Kasparov, 54, is the which is why he’s been giving talks around the country on why humans need to work with AI in cybersecurity.  

He tells me machines can now learn too fast for humans to keep up, no matter if it’s chess or cybersecurity. “The vigilance and the precision required to beat the machine — it’s virtually impossible to reach in human competition,” Kasparov says.

Nobody’s perfect

About two months before Defcon, I’m at Darktrace’s headquarters in New York, where company executives show me how the system works.

On a screen, I see connected computers and printers sending data to Darktrace’s network as it monitors for darkmarkets behavior that’s out of the ordinary.  

“For example, Sue doesn’t usually access this much internal data,” Nancy Karches, Darktrace’s sales manager, tells me. “This is straying from Sue’s normal pattern.” So Darktrace shuts down an attack most likely waged by another machine.

“When you have machine-based attacks, the attacks are moving at a machine speed from one to the other,” says Darktrace CEO Nicole Eagan. “It’s hard for humans to keep up with that.”

But what happens when AI becomes the norm? When everyone’s using AI, says Brumley, hackers will turn all their attention on finding the machines’ flaws — something they’re not doing yet.

“We’ve seen again and again, the reason new solutions work better is because attackers aren’t targeting its weaknesses,” he says. “As soon as it became popular, it started working worse and worse.”

About 60 percent of cybersecurity experts at Black Hat believe hackers will use AI for attacks by 2018, according to a survey from the security company Cylance.

“Machine learning security is not foolproof,” says Hyrum Anderson, principal data scientist at cybersecurity company Endgame, who and their tools. Anderson expects AI-based malware will rapidly make thousands of attempts to find code that the AI-based security misses.

“The bad guy can do this with trial and error, and it will cost him months,” Anderson says. “The bot can learn to do this, and it will take hours.”

Anderson says he expects cybercriminals will eventually sell AI malware on darknet market markets to wannabe hackers.

For now, Sherwood feels safe having the city protected by an AI machine, which has shielded Las Vegas’ network for the past year. But he also realizes a day will come when hackers could outsmart the AI. That’s why Sherwood and his Las Vegas security team are at Black Hat: to learn how to use human judgment and creativity while the machine parries attacks as rapidly as they come in.

Kasparov has been trying to make that point for the last 20 years. He sees machines doing about 80 percent to 90 percent of the work, but he believes they’ll never get to what he calls “that last decimal place.”

“You will see more and more advanced destruction on one side, and that will force you to become more creative on the positive side,” he tells me.

“Human creativity is how we make the difference.”

: Reporters’ dispatches from the field on tech’s role in the global refugee crisis. 

: CNET hunts for innovation outside the Silicon Valley bubble.