Microsoft Research Manager Mike Walker: Security Rules Are Social Constructs, and AI Has Upended the Cost of Network Attacks
·2026.11.04 02:14
Key point
Walker argues that the 2013-2016 Cyber Grand Challenge relied on expert systems rather than machine learning, and that current AI capabilities have disrupted the traditional balance of offensive scarcity.
Details
- Mike Walker, a research manager at Microsoft Research, argues that security rules are social constructs and that every system requirement consumes user trust, necessitating a social context for security design.
- The DARPA Cyber Grand Challenge (CGC), which ran from 2013 to 2016, used expert systems and is now referred to as a 'harness'; it was an autonomous version of Capture the Flag where systems operated in an air-gapped environment without human intervention.
- Walker states that the cost equation for high-end computer network attacks has been completely upended by the capabilities of current AI models, disrupting the previous equilibrium based on offensive scarcity.
- Red and blue teaming are artificial separations; the core difference is control, and the same technology serves as an attack or defense tool depending on who holds the key (e.g., encryption utility vs. ransomware).
- Project Freta addresses tampering by acquiring signals directly from cloud hardware to prevent software-based telemetry from being removed or manipulated.
- Walker notes that while individual intelligence can be assessed, collaboration efficiency and goal alignment are difficult to observe, leading to inefficiencies where teams re-solve problems already solved by others.
This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.
Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.