Skip to main content
Springer Nature Link
Log in

AI in Cyber Operations: Ethical and Legal Considerations for End-Users

  • Chapter
  • First Online:
Artificial Intelligence and Cybersecurity

Abstract

This chapter addresses several of the principal ethical challenges confronting current and proposed new uses of artificial intelligence (AI) undertaken to enhance cybersecurity and conflict operations. Current uses of modular AI—namely AI tailored for specific tasks and involving closely-supervised machine learning—already pervade both defensive and offensive cyber operations with varying degrees of efficiency and success. Representative samples of these are illustrated and discussed, highlighting some of the moral challenges accompanying each. The chapter then concludes with proposed uses of general AI, including deep learning enabling expanded autonomy, along with the attendant risks and prospective moral dilemmas arising from such uses within the cyber domain. Our specific focus will be the impact, both favorable and unfavorable, on the character and capacities of the individuals and teams of professional experts who will constitute the end-users of AI-enhanced cybersecurity measures.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution

Subscribe and save

Springer+ Basic
$34.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

References

  1. Akram, A., Lowe-Power, J.: The Tribes of Machine Learning and the Realm of Computer Architecture (2020). arXiv

    Google Scholar 

  2. Apruzzese, G., Colajanni, M., Ferretti, L., Guido, A., Marchetti, M.: On the effectiveness of machine and deep learning for cyber security. In: 10th International Conference on Cyber Conflict (CyCon), Tallinn, pp. 371–390 (2018). https://doi.org/10.23919/CYCON.2018.8405026

  3. Ayoub, K., Payne, K.: Strategy in the age of artificial intelligence. J. Strategic Stud. 39(5–6), 793–819 (2016)

    Article  Google Scholar 

  4. Baker, J.: Counterintelligence Implications of Artificial Intelligence—Part III (2018). https://www.lawfareblog.com/counterintelligence-implications-artificial-intelligence-part-iii. Cited by 8 May 2021

  5. Berman, D.S., Buczak, A.L., Chavis, J.S., Corbett, C.L.: A survey of deep learning methods for cyber security. Information 10(4), 122 (2019). https://doi.org/10.3390/info10040122

    Article  Google Scholar 

  6. Buchanan, B.: The Hacker and the State. Harvard University Press, Cambridge, MA (2020). https://doi.org/10.4159/9780674246010-004

  7. Comiter, M.: Attacking Artificial Intelligence-AI’s Security Vulnerability and What Policymakers Can Do About It. Belfer Center for Science and International Affairs (2019). https://www.belfercenter.org/publication/AttackingAI. Cited 3 May 2021

  8. Council on Foreign Relations: Ctrl +  Shift +  Delete: The GDPR’s Influence on National Security Posture. Net Politics (2019). https://www.cfr.org/blog/gdpr-influence-national-security-posture

  9. Crootof, R.: War Torts: Accountability for Autonomous Weapons. 164 University of Pennsylvania Law Review 1347 (2016)

    Google Scholar 

  10. ENISA ad hoc Working Group on Artificial Intelligence: AI CYBERSECURITY CHALLENGES-Threat Landscape for Artificial Intelligence (2020). https://www.enisa.europa.eu/publications/artificial-intelligence-cybersecurity-challenges

  11. EU High-Level Expert Group on Artificial Intelligence: A Definition of AI: Main Capabilities and Disciplines (2019). https://ec.europa.eu/digital-single-market/en/news/definition-artificial-intelligence-main-capabilities-and-scientific-disciplines

  12. European Commission: General Data Protection Regulation (GDPR) (2018)

    Google Scholar 

  13. Gilli, A., Gilli, M., Leonard, A.S., Stanley-Lockman, Z.: ”NATO-Mation”: Strategies for Leading in the Age of Artificial Intelligence. NDC Research Paper 15 in NATO Defense College ”NDC Research Papers Series” (2020)

    Google Scholar 

  14. Global partnership of artificial intelligence (GPAI): Working group on responsible AI (2020). https://gpai.ai/projects/responsible-ai/. Cited by 26 May 2021

  15. Harley, N.: North Korea behind WannaCry attack which crippled the NHS after stealing US cyber weapons, Microsoft chief claims. The Telegraph (2017). Cited 3 May 2021

    Google Scholar 

  16. Hartmann, K., Steup, C.: Hacking the AI-the next generation of hijacked systems. In: 12th International Conference on Cyber Conflict (CyCon), Estonia, pp. 327–349 (2020). https://doi.org/10.23919/CyCon49761.2020.9131724

  17. Human Rights Watch (HRW): China: Big Data Fuels Crackdown in Minority Region (2018). https://www.hrw.org/news/2018/02/26/china-big-data-fuels-crackdown-minority-region. Cited 8 May 2021

  18. Jackson, B.W.: Cybersecurity, Privacy, and artificial intelligence: an examination of legal issues surrounding the european union general data protection regulation and autonomous network defense. Minnesota J. Law Sci. Technol. 21(1), 169 (2020)

    Google Scholar 

  19. Jobin, A., Ienca, M., Vayena, E.: The global landscape of AI ethics guidelines. Nat. Mach. Intell. 1(9), 389–399 (2019). https://doi.org/10.1038/s42256-019-0088-2

    Article  Google Scholar 

  20. Joint Artificial Intelligence Center (JAIC) (2018). https://www.ai.mil/about.html

  21. Joint Artificial Intelligence Center (JAIC): Integrating AI and Cyber into the DoD (2019). https://www.ai.mil/blog.html. Cited 3 May 2021

  22. Kaloudi, N., Li, J.: The AI-based cyber threat landscape: a survey. ACM Comput. Surv. 53(1) (2020). https://doi.org/10.1145/3372823

  23. Kawamoto, D.: Will GDPR Rules Impact States and Localities? Government Technology (2018). https://www.govtech.com/data/Will-GDPR-Rules-Impact-States-and-Localities.html. Cited 3 May 2021

  24. Kehler, C.R., Lin, H., Sulmeyer, M.: Rules of engagement for cyberspace operations: a view from the USA. J. Cybersecur. 3(1) (2017). https://doi.org/10.1093/cybsec/tyx003

  25. Kittrie, O.F.: Lawfare. Oxford University Press, Oxford (2016)

    Book  Google Scholar 

  26. Knight, W.: The Dark Secret at the Heart of AI (2017). https://www.technologyreview.com/2017/04/11/5113/the-dark-secret-at-the-heart-of-ai/. Cited by 8 May 2021

  27. Kontzer, T.: What Does the Near Future of Cyber Security Look Like? A Roomful of RSAC Attendees Considered That, and Here Are the Takeaways. In: RSA Conference Blog (2019). https://www.rsaconference.com/library/blog/what-does-the-near-future-of-cyber-security-look-like-a-roomful-of-rsac-attendees. Cited 25 May 2021

  28. Leveson, N.G.: Engineering a Safer World. MIT Press, Cambridge, MA (2011)

    Google Scholar 

  29. Lucas, G.: Ethics and Cyber Warfare: The Quest for Responsible Security in the Age of Digital Warfare. Oxford University Press, New York (2017)

    Book  Google Scholar 

  30. MITRE: Verification and Validation, Systems Engineering Guide (2013). https://www.mitre.org/publications/systems-engineering-guide/se-lifecycle-building-blocks/test-and-evaluation/verification-and-validation

  31. NATO: Allied Joint Doctrine for Cyberspace Operations AJP-3.20 (2020)

    Google Scholar 

  32. Nilsson, N.J.: The Quest for Artificial Intelligence. Cambridge University Press, Cambridge (2010)

    Google Scholar 

  33. Pattison, J.: From defence to offence: The ethics of private cybersecurity. Eur. J. Int. Secur. 5(2), 233–254 (2020). https://doi.org/10.1017/eis.2020.6

    Article  Google Scholar 

  34. Phillips, P.J., Hahn, C.A., Fontana, P.C., Broniatowski, D.A., Przybock, M.A.: Four Principles of Explainable Artificial Intelligence, NISTIR 8312 (2020). https://doi.org/10.6028/NIST.IR.8312-draft

  35. Pozen, D.E.: Transparency’s ideological drift. Yale Law J. 128, 100 (2018)

    Google Scholar 

  36. Ryan, M., Stahl, B.C.: Artificial intelligence ethics guidelines for developers and users: clarifying their content and normative implications. J. Inform. Commun. Ethics Soc. (2020). https://doi.org/10.1108/JICES-12-2019-0138/full/html

  37. San Remo Manual on International Law Applicable to Armed Conflicts at Sea, 12 June 1994 (1994). https://ihl-databases.icrc.org/ihl/INTRO/560

  38. Sanger, D.E., Perlroth, N., Barnes, J.E.: As Understanding of Russian Hacking Grows, So Does Alarm, New York Times. New York Times (2021). https://www.nytimes.com/2021/01/02/us/politics/russian-hacking-government.html. Cited by 26 May 2021

  39. Schmitt, M.N. (ed.): Tallinn Manual 1.0-On the International Law Applicable to Cyber Warfare. Cambridge University Press, Cambridge (2013)

    Google Scholar 

  40. Schmitt, M.N., Vihul, L. (eds.): Tallinn Manual 2.0—On the International Law Applicable to Cyber Operations, 2nd edn. Cambridge University Press, Cambridge (2017)

    Google Scholar 

  41. Truong, T.C., Diep, Q.B., Zelinka, I.: Artificial intelligence in the cyber domain: offense and defense. Symmetry 12(3), 410 (2020). https://doi.org/10.3390/sym12030410

    Article  Google Scholar 

  42. Vaccaro, L., Sansonetti, G., Micarelli, A.: An empirical review of automated machine learning. Computers 10(1:11) (2021). https://doi.org/10.3390/computers10010011

  43. Wolford, B.: What is GDPR, the EU’s new data protection law? GDPR.EU (2019). https://gdpr.eu/what-is-gdpr/. Cited 26 May 2021

Download references

Author information

Authors and Affiliations

  1. Norwegian Defence University College/Cyber Academy, Lillehammer, Norway

    Kirsi Helkala

  2. Peace Research Institute Oslo, Oslo, Norway

    Kirsi Helkala

  3. United State Air Force Academy, Colorado Springs, CO, USA

    James Cook

  4. United State Naval Academy, Annapolis, MD, USA

    George Lucas

  5. Brooklyn Law School, Brooklyn, NY, USA

    Frank Pasquale

  6. Peace Research Institute Oslo, Oslo, Norway

    Gregory Reichberg & Henrik Syse

Authors
  1. Kirsi Helkala
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. James Cook
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. George Lucas
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Frank Pasquale
    View author publications

    You can also search for this author in PubMed Google Scholar

  5. Gregory Reichberg
    View author publications

    You can also search for this author in PubMed Google Scholar

  6. Henrik Syse
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Kirsi Helkala .

Editor information

Editors and Affiliations

  1. JAMK University of Applied Sciences, Jyväskylä, Finland

    Tuomo Sipola

  2. JAMK University of Applied Sciences, Jyväskylä, Finland

    Tero Kokkonen

  3. JAMK University of Applied Sciences, Jyväskylä, Finland

    Mika Karjalainen

Rights and permissions

Reprints and permissions

Copyright information

© 2023 The Author(s), under exclusive license to Springer Nature Switzerland AG

About this chapter

Check for updates. Verify currency and authenticity via CrossMark

Cite this chapter

Helkala, K., Cook, J., Lucas, G., Pasquale, F., Reichberg, G., Syse, H. (2023). AI in Cyber Operations: Ethical and Legal Considerations for End-Users. In: Sipola, T., Kokkonen, T., Karjalainen, M. (eds) Artificial Intelligence and Cybersecurity. Springer, Cham. https://doi.org/10.1007/978-3-031-15030-2_9

Download citation

  • DOI: https://doi.org/10.1007/978-3-031-15030-2_9

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-031-15029-6

  • Online ISBN: 978-3-031-15030-2

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics