THIS CONTENT IS BROUGHT TO YOU BY THE University of Agder - read more
How AI can provide too broad an overview of society:
"Open data threatens Norway's security"
"The combination of open, public data and artificial intelligence poses a major risk to Norwegian society," says Professor Morten Goodwin.
“It’s a paradox. As a researcher, it’s important for me to have access to as much public data as possible. But those with destructive intentions towards Norway have the same need,” says Professor Morten Goodwin at the University of Agder.
In Norway, vast amounts of data are publicly available. This includes everything from personal information to details about roads and traffic, as well as public contracts.
In a new episode of his Artificial Intelligence podcast (in Norwegian), Goodwin talks about how this information can become a threat when combined with artificial intelligence.
Many types of data
There are many types of public data in Norway. Here are some examples:
Geographic data
Norway shares geographic data through platforms like the Norwegian Mapping Authority. This includes information about infrastructure such as bridges, tunnels, and power grids.
“As public information, it may seem harmless, but when this data is widely accessible, it can be exploited in the planning of both physical and cyberattacks against critical infrastructure,” Goodwin says.
Employee directories
Public institutions in Norway often publish directories that include names, positions, and contact information.
“Such information can be used to create targeted phishing campaigns or other forms of fraud. Attackers can impersonate a colleague or someone in management to gain access to protected areas or information,” says Goodwin.
Public procurement
Doffin is Norway's national database for the announcement of public procurements. Here, you can find information about public contracts, bids and procurement data, including details on which companies have been awarded contracts and what has been purchased.
“By knowing the details of public contracts, criminals can create fake invoices or other fraud schemes aimed at both the government and contracting parties,” says Goodwin.
Traffic and travel data
Data on public transport habits, traffic flows, and movement patterns in cities can be useful for urban planning and public safety. But in the wrong hands, such data can be used to identify vulnerabilities, such as the time and location of effective attacks or sabotage.
“Data on movement patterns can be used to predict when and where people or goods will be at a given time. This can make it easier to coordinate physical or cyberattacks. Attackers with knowledge of how traffic flows can also choose the best time to launch a cyberattack to create maximum disruption,” Goodwin says.
Communication in the public sector
Much of the communication in the public sector, including case processing and decision-making, is documented and published. Even seemingly innocuous communication between civil servants can provide insight into internal processes, security measures, or ongoing discussions about sensitive policies.
“Not only can such information be used for political manipulation or to cast doubt on political leaders and their policies. Artificial intelligence can also analyse the leaked content to identify patterns, keywords, and sensitive information that can be exploited in future attacks,” says Goodwin.
Eight threat scenarios
Morten Goodwin identifies eight ways in which the combination of artificial intelligence and open data could pose a threat to Norwegian society:
- Cyber threats: More accessible data increases the risk of someone exploiting vulnerabilities to gain access to sensitive information.
- Espionage: Increased data availability can potentially make espionage easier.
- Disinformation and propaganda: Artificial intelligence can be used to target and tailor disinformation to influence public opinion.
- Economic espionage: Foreign actors can steal trade secrets and intellectual property using the combination of open data and artificial intelligence.
- Invasion of privacy: Artificial intelligence can process large amounts of personal data and create detailed profiles of individuals that can easily be abused.
- Critical infrastructure vulnerabilities: By using advanced algorithms, artificial intelligence can quickly identify weaknesses in everything from software and networks to physical security systems.
- Military security: Available data can reveal information about military operations and capabilities, compromising national defence.
- Influence operations: Data analysis done by artificial intelligence can improve operations where foreign agents try to manipulate political processes and elections.
———
Read the Norwegian version of this article on forskning.no
This content is paid for and presented by the University of Agder
This content is created by the University of Agder's communication staff, who use this platform to communicate science and share results from research with the public. The University of Agder is one of more than 80 owners of ScienceNorway.no. Read more here.
More content from the University of Agder:
-
20 years ago, it took around 17 minutes for teenagers to fall asleep once they got into bed. Today, it takes over an hour
-
Refugees in kindergartens: "Mutual trust is key"
-
New report: One in four middle managers in schools work in stressful environments
-
VAR has made referees much more accurate
-
People are positive towards care robots
-
Researchers will use mice's sense of smell to gain insights into how the brain learns