The Path of an AI Creator News: Former US soldier sells information to China. What are the security risks and the role of AI? #InformationLeak #AISecurity #USMilitary
Video explanation
What?! A shocking case of a former sergeant attempting to sell classified information.
Hello, this is John! When you hear AI (artificial intelligence), it sounds like a technology of the future! I usually tell people about the latest information on AI and AI technologies that make life more convenient in an easy-to-understand way, but today I'd like to change the topic a little.
Today's topic is information security. In particular, we'll be talking about shocking news that could happen in our everyday lives and make us think, "Wow, that could really happen?" Recently, a former Army sergeant in the United States tried to sell very important secret information of the country to China! What's more, the way he did it has been described as very "sloppy" or "amateurish." What on earth is going on? Let's take a look together!
Summary of the incident – What happened?
The main character in this case is a former sergeant who once served in the US Army. As a former military man, he should have been well aware of the importance of information and the protection of the country. But what he did was something that directly affected the security of the country.Important "classified data" (information that is treated as top secret by the country and cannot be shown to the general public)They planned to sell it to China, of all places, and tried to put it into action.
Fortunately, the plan was discovered midway through, and the former sergeant admitted to his crime. But what was most surprising was the "method" reported in the news. It was "amateurish," or in other words, a completely amateurish method. It seems far from the coolness of a spy movie.
What do you mean by "amateurish tactics"?
When you hear the phrase "amateur methods," what do you imagine? In movies and TV shows, spies often disguise themselves, use high-tech gadgets, and come up with ingenious plans to steal secrets that no one would think of. But this case seems to have been quite different.
The article didn't go into detail about the specific method, but the "amateurish" part means that it might have been something like this.
- The way the information was taken out was too simple: For example, it might have been something that anyone could have thought of, like secretly copying it to a USB memory stick and then putting it in their bag and taking it with them.
- The contact details were obvious: If you use regular email to contact someone to whom you are selling confidential information, or if you exchange emails without encryption (converting information using special rules to make it unreadable to unauthorized people), you will be easily found out by a professional investigator.
- The deal was done poorly: It may have been an overly direct and suspicious exchange, something like, "I'm going to buy this information, so please transfer money here."
Was it a bit of a slacker, like someone plotting something bad for the first time? But no matter how "amateurish" the method may have been, it was a serious case because it involved classified information that could affect the future of the country. It's not a laughing matter.
Why does this happen? – Information management pitfalls
So why did such an "oversight" incident happen in a place that handles important national information? The former sergeant's personal motives (for example, whether he was short on money or had some dissatisfaction with the country) cannot be determined from the reports alone, but behind these incidents there are often much bigger problems hidden.The difficulty of "information management".
No matter how prestigious an organization is, it needs to be careful of many things in order to protect information.
- Manage access permissions: Have you properly defined and protected "who" can access "what information" and "when"? Is important information being seen by people who don't need to be?
- Physical Security: Are important documents and data stored on computers and USB memory sticks easily accessible? Are security cameras and entrance/exit management in place?
- Worker education and awareness: This may be the most important thing! Do the people working there really understand the importance of information and the risks involved when it is leaked? A naive attitude like "this much won't be a problem" can sometimes lead to a major accident.
- Management of resignations: Is it possible that people who leave an organization may still have the information or be able to access it later? (This is also a surprising blind spot.)
It is often said that "security holes lie in people, not systems," and this is absolutely true. No matter how high-performance the lock (security system) is, it's meaningless if someone with a duplicate key (someone with legitimate access rights) opens it from the inside. Perhaps this incident was also due to carelessness or gaps related to "people."
Human risks that will not change even in the age of AI and what AI can do
In my blog, I always talk about how AI (artificial intelligence) will change society. AI is actually playing a huge role in the world of security. For example,
- Automatic detection of suspicious emails: AI can also tell when spam mail arrives and classify it as suspicious, and sort it into the spam folder. I've heard that more and more sophisticated spam mails are being created by AI these days, but the AI that fights against it is also evolving every day.
- Unauthorized access monitoring: There is also technology that allows AI to monitor a company or organization's computer system 24 hours a day, 365 days a year to make sure that no malicious individuals are trying to sneak into it. If there is any strange activity, it will immediately alert humans.
- Detecting the removal of confidential information: It is now possible for AI to detect and block important files from being illegally copied or sent to an outside party.
In this way, AI is a reliable ally, able to quickly spot dangers that humans might overlook and discover suspicious patterns in huge amounts of data.
However, considering the recent incident involving the former sergeant, no matter how advanced AI technology becomes,In the end, it is humans who handle and judge information.That's right. AI alone cannot completely eliminate the risk of people maliciously trying to steal information or inadvertently breaking important rules.
On the contrary, there are also crimes that misuse AI to deceive people in more ingenious ways (for example, have you heard of people creating realistic voices and images to commit impersonation fraud?). Therefore, it is very important to consider how to use this new tool called AI, and how we humans who use it should be. As technology advances, we also need to update our own knowledge and mindset.
Message from John
This news was somehow different from a spy movie, and strangely human. But I think that this is exactly why there are lessons that are familiar to us. The latest technology is important, but I think that the mindset of the people who use it and the obvious practice of following basic rules are the best shields that protect us from various dangers. I hope everyone will take a moment to think about how they can protect their own important information.
This article is based on the following original articles and is summarized from the author's perspective:
Former US Army Sergeant pleads guilty after amateurish
attempt at selling secrets to China