Refer to AI-generated (also known as synthetic or manipulated media) which is often video or audio, that convincingly mimic real people’s likenesses or voices, making them appear as if they are saying or doing things they never did. These digitally altered materials are often generated through advanced machine learning techniques, especially generative adversarial networks (GANs), which can create realistic yet fake and misleading content.
In higher education, deepfakes pose significant risks, including threats to privacy, reputation, and information security. The rise of deepfake technology has led to serious cybersecurity threats, as seen in an incident at the University of Utah. Here, phishing emails were used to acquire legitimate photos of students, which were later manipulated into threatening deepfake images for extortion purposes. Such attacks represent a new form of cybercrime, leveraging AI-driven digital manipulation to compromise personal identities and reputations and, in turn, exploit victims for financial gain.
To combat these sophisticated cyber threats, many higher education institutions are adopting a multi-layered approach to cybersecurity that combines education, technology, and strict security protocols, to help campuses manage and mitigate these threats. Examples of strategies:
- Awareness and Training: Educating students and faculty about recognizing phishing scams and verifying the authenticity of emails, particularly those requesting sensitive information. Many campuses are implementing mandatory cybersecurity training programs to foster vigilance.
- Digital Literacy Initiatives: Incorporating digital literacy into curricula to educate students on the risks of AI, data privacy, and safe online behavior, especially as AI tools become more accessible and students themselves may experiment with these technologies.
- Email and Network Security: Upgrading email filtering and monitoring systems to detect and block phishing attempts more effectively, especially those targeting students with requests for sensitive information.
- Enhanced Authentication and Detection Systems: Investing in and upgrading multifactor authentication (MFA) and using anomaly-detection algorithms that spot irregularities in digital communications; e.g., inconsistencies in face movements, unnatural speech patterns, or other technical markers. These tools use algorithms that can identify alterations in the pixelation or lighting of images, helping to screen out manipulated content. Machine learning models can also help identify signs of manipulation in images or videos. Some universities are using digital watermarking and blockchain-based authentication to verify legitimate content.
- Incident Response Plans and Forensic Analysis: Developing specific incident response strategies for deepfake and cyber-extortion cases, enabling quicker containment, investigation, and, where necessary, cooperation with law enforcement. When deepfake-based threats or attacks occur, universities employ forensic analysis to trace the source of the attack and collect evidence. These efforts aid in understanding the vulnerabilities exploited and strengthening defenses.
- Collaboration with Law Enforcement: Collaborating with local and federal law enforcement agencies, especially in cases involving extortion or blackmail. This collaboration aids in swift actions needed to protect students and staff and may serve as a deterrent to future attacks.
