Pith. sign in

REVIEW 29 cited by

The Malicious Use of Artificial Intelligence: Forecasting, Prevention, and Mitigation

Not yet reviewed by Pith; the record is open.

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 1802.07228 v2 pith:WQYYZWOS submitted 2018-02-20 cs.AI cs.CRcs.CY

The Malicious Use of Artificial Intelligence: Forecasting, Prevention, and Mitigation

classification cs.AI cs.CRcs.CY
keywords landscapemakemaliciousthreatswaysanalyzingareasartificial
verification ladder T0 review T1 audit T2 compute T3 formal T4 reserved
0 comments
read the original abstract

This report surveys the landscape of potential security threats from malicious uses of AI, and proposes ways to better forecast, prevent, and mitigate these threats. After analyzing the ways in which AI may influence the threat landscape in the digital, physical, and political domains, we make four high-level recommendations for AI researchers and other stakeholders. We also suggest several promising areas for further research that could expand the portfolio of defenses, or make attacks less effective or harder to execute. Finally, we discuss, but do not conclusively resolve, the long-term equilibrium of attackers and defenders.

discussion (0)

Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.

Forward citations

Cited by 29 Pith papers

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score.

  1. The Pile: An 800GB Dataset of Diverse Text for Language Modeling

    cs.CL 2020-12 conditional novelty 8.0

    The Pile is a newly constructed 825 GiB dataset from 22 diverse sources that enables language models to achieve better performance on academic, professional, and cross-domain tasks than models trained on Common Crawl ...

  2. Modular Pretraining Enables Access Control

    cs.LG 2026-07 conditional novelty 7.0

    GRAM selectively trains auxiliary modules so that ablating one at inference removes a targeted capability while preserving the rest, closely tracking data-filtered models at 5x lower cost across 5 capability profiles.

  3. V.O.I.C.E (Voice, Ownership, Identity, Control, Expression): Risk Taxonomy of Synthetic Voice Generation From Empirical Data

    cs.CR 2026-04 unverdicted novelty 7.0

    V.O.I.C.E is a new taxonomy that organizes synthetic voice risks into five categories and shows how they interact with exposure, visibility, and legal context using empirical incident data.

  4. Do Agents Dream of Root Shells? Partial-Credit Evaluation of LLM Agents in Capture the Flag Challenges

    cs.AI 2026-04 unverdicted novelty 7.0

    LLM agents reach only 35% average checkpoint completion on ten realistic CTF challenges in a new open benchmark with automated partial-credit scoring.

  5. Improving Dictionary Learning with Gated Sparse Autoencoders

    cs.LG 2024-04 unverdicted novelty 7.0

    Gated SAEs decouple which features to use from how large their activations should be, applying the L1 penalty only to selection and thereby eliminating shrinkage while halving the number of firing features needed for ...

  6. RoguePrompt: Dual-Layer Encoding for Self-Reconstruction to Circumvent LLM Moderation

    cs.CR 2026-07 conditional novelty 6.0

    RoguePrompt, a Vigenère+ROT13 self-reconstruction jailbreak, achieves 70.18% execution@3 and 93.93% bypass@3 across GPT-4o, Claude 3 Opus, and Gemini 1.5 Pro on 313 StrongREJECT prompts.

  7. How Low Can We Go? Minimum Spectroscopic Requirements For Supernova Subtype Classification

    astro-ph.IM 2026-07 accept novelty 6.0

    ABC-SN classifies ten supernova subtypes with no performance loss down to R_λ=50 and SNR=5, and only minimal loss at R_λ=25.

  8. FedOT: Ownership Verification and Leakage Tracing via Watermarks for Federated LDMs

    cs.CV 2026-06 unverdicted novelty 6.0

    FedOT introduces chunked watermarks plus latent vector transformation to enable ownership verification, client tracing, and resistance to VAE replacement attacks in federated LDMs.

  9. One Mask to Rule Them All: On Hidden Facts after Editing and How to Find Them

    cs.LG 2026-04 conditional novelty 6.0

    ROME and MEMIT knowledge edits share a common weight subset isolable by a compact binary mask that reverses ~70–80% of edits and is necessary for editing success.

  10. Large Language Models Generate Harmful Responses Using a Distinct Mechanism, Shared Across Harm Types

    cs.CL 2026-04 unverdicted novelty 6.0

    Harmful generation in LLMs relies on a compact, unified set of weights that alignment compresses and that are distinct from benign capabilities, explaining emergent misalignment.

  11. Large Language Models Generate Harmful Responses Using a Distinct Mechanism, Shared Across Harm Types

    cs.CL 2026-04 unverdicted novelty 6.0

    Harmful LLM outputs rely on a compact, cross-harm set of weights distinct from benign skills; alignment compresses them, and pruning them reduces emergent misalignment.

  12. Gaussian Shannon: High-Precision Diffusion Model Watermarking Based on Communication

    cs.CV 2026-03 conditional novelty 6.0

    Gaussian Shannon models diffusion as a noisy channel and uses error-correcting codes plus majority voting to recover watermark bits exactly from perturbed AI-generated images.

  13. Forget-It-All: Multi-Concept Machine Unlearning via Concept-Aware Neuron Masking

    cs.CV 2026-01 unverdicted novelty 6.0

    FIA uses contrastive concept saliency and temporal-spatial neuron identification to build unified masks that erase multiple target concepts while preserving general generation quality in diffusion models.

  14. Unsolved Problems in ML Safety

    cs.LG 2021-09 accept novelty 6.0

    The paper presents a roadmap that identifies four unsolved problems in ML safety: robustness against hazards, monitoring for hazards, alignment of model goals with human intent, and systemic safety.

  15. CTRL: A Conditional Transformer Language Model for Controllable Generation

    cs.CL 2019-09 unverdicted novelty 6.0

    CTRL is a large conditional transformer language model that uses naturally occurring control codes to steer text generation style and content.

  16. We Need No Pixels: Video Manipulation Detection Using Stream Descriptors

    cs.LG 2019-06 unverdicted novelty 6.0

    Video forgeries are detectable via binary classification on multimedia stream descriptors without pixel analysis.

  17. AI Safety as Control of Irreversibility: A Systems Framework for Decision-Energy and Sovereignty Boundaries

    cs.AI 2026-05 unverdicted novelty 5.0

    AI safety requires stabilizing sovereignty boundaries to stop irreversible decision authority from concentrating in the most efficient AI nodes.

  18. FSFM: A Biologically-Inspired Framework for Selective Forgetting of Agent Memory

    cs.AI 2026-04 unverdicted novelty 5.0

    FSFM is a biologically-inspired selective forgetting framework for LLM agents that claims to boost access efficiency by 8.49%, content quality by 29.2% signal-to-noise, and eliminate security risks entirely through a ...

  19. MalGEN: A Testbed for Modeling and Evaluating Malware Behaviors

    cs.CR 2025-06 unverdicted novelty 5.0

    MalGEN generates 977 executable malware samples across 1920 settings, with 45.71% evading existing detection engines and exposing gaps in current defenses.

  20. Investigating The Security of Modern AI and Cloud Infrastructure

    cs.CR 2026-06 unverdicted novelty 4.0

    Develops a taxonomy of security interaction levels in AI/cloud infrastructure and demonstrates practical attacks exploiting isolation assumptions.

  21. When AI Meets Wall Street: A Survey on Trustworthy AI in Fintech

    cs.CR 2026-05 unverdicted novelty 4.0

    A survey that proposes a lifecycle-centric framework and the Financial AI Security and Robustness Taxonomy to organize 17 attack subtypes on AI pipelines in finance.

  22. STRIKE: A Structured Taxonomy of Cybercrime for Risk, Impact, Knowledge, and Evolution

    cs.CR 2026-05 unverdicted novelty 4.0

    STRIKE is a proposed unified taxonomy for cybercrimes organized by attack vectors, tactics, societal impact, detection methods, and mitigation approaches.

  23. Toward Accountable AI-Generated Content on Social Platforms: Steganographic Attribution and Multimodal Harm Detection

    cs.CV 2026-04 unverdicted novelty 4.0

    The proposed steganography-based attribution system with CLIP multimodal fusion achieves robust watermarking under distortions and 0.99 AUC-ROC for harm detection, enabling traceable AI content accountability.

  24. We Need Strong Preconditions For Using Simulations In Policy

    cs.CY 2026-04 unverdicted novelty 4.0

    Societal-scale LLM agent simulations for policy need three preconditions: avoid neutral treatment of marginalized population simulations, require population participation, ensure accountability, plus development and d...

  25. Preserving Decision Sovereignty in Military AI: A Trade-Secret-Safe Architectural Framework for Model Replaceability, Human Authority, and State Control

    cs.CY 2026-03 unverdicted novelty 4.0

    A trade-secret-safe layered architecture is specified to preserve decision sovereignty in military AI by making supplier models replaceable components under state-owned orchestration of policy, audit, and authorization.

  26. The coordination gap in frontier AI safety policies

    cs.CY 2026-02 unverdicted novelty 4.0

    Frontier AI safety policies have a structural coordination gap caused by diffuse benefits and concentrated costs, which can be addressed by adapting precommitment and shared response protocols from other high-risk domains.

  27. Reducing malicious use of synthetic media research: Considerations and potential release practices for machine learning

    cs.CY 2019-07 unverdicted novelty 4.0

    The paper outlines considerations, analogies from other fields, and recommendations for ML research norms on synthetic media to mitigate misuse risks without prescribing specific policies.

  28. Taxing Artificial Intelligence

    cs.CY 2026-07 unverdicted novelty 3.0

    Taxation of AI activities can correct externalities, redistribute costs and gains, and support regulation, though instruments like corporate taxes, consumption taxes, and excises vary in feasibility, measurement chall...

  29. The Role of Cooperation in Responsible AI Development

    cs.CY 2019-07 unverdicted novelty 3.0

    Competitive pressures in AI development create collective action problems that may require industry cooperation, with key factors and strategies identified to enable responsible outcomes.