TALKING

As data layers are combined and processes are connected , their collective value is compounded exponentially . It is this value that provides the foundation for quickly and easily applying AI techniques and technologies to drive actionable insights and infrastructure better outcomes .

Karl Mattson , Field CISO , Noname Security

Generative AI for infrastructure

Utilities facing onslaught of API led attacks

The energy and utilities sector literally keeps the lights on in today ’ s world . To improve resilience and guarantee service uptime , energy and utilities companies know that digitisation is key to transforming the services they deliver . Aging technology stacks , a lack of interoperability and collaboration , and poor security hygiene are all limiting progress .

This is where APIs are making the digital vision a reality for this sector , enabling energy and utilities companies to move away from the heavy-lifting manual tasks , to automate , to digitise , and to create optimised customer experiences .

However , at the same time , they are also creating a wave of API-related security incidents resulting from leaky APIs , vulnerable systems APIs , authorisation flaws , and more .

The energy and utilities sector was the only industry to see no change or decrease in the number of businesses affected by API security incidents . However , 78 % were affected , proving that the issue shows no signs of abating – and it is not being dealt with properly .

Despite the consistently high frequency of API security incidents , 94 % of energy and utilities respondents expressed confidence in their API security tools . The clear disconnect between confidence in existing tools and a high number of API security incidents is concerning .

Another concern is the method of attack . Research showed that web application firewall attacks were most common in 2023 , while Distributed Denial of Service attacks were previously most likely .

With the energy and utilities sector highly regulated – and in some countries controlled by central government – energy and utilities firms can amass penalties and fines should an API security incident compromise them . Nearly half of the survey respondents said that this had been an issue for their organisation .

At the same time , 79 % respondents said their API security platform provider helps them to keep compliance with the Payment Card Industry Data Security Standard , PCI DSS , whilst 80 % of sector respondents said their provider helped them to follow GDPR – the highest percentage of any sector surveyed .

This sector may be considered to be behind in digital transformation initiatives , and therefore the need to modernise has become essential . This poses unique challenges , especially when it comes to securing legacy technology . Energy and utilities companies should work with an API security platform provider that can deliver the strong API security they need .

Certain AI techniques and technologies are not new to the infrastructure sector . For example , owneroperators have already started using computer vision AI techniques to quickly find , analyse , and detect spalling , corrosion , and other defects that compromise the integrity of bridges , dams , rail networks , and more .

However , what is new and what presents significant value to infrastructure organisations across the project lifecycle is generative AI .

In a sector challenged by resource constraints , delays , cost overruns , and evolving sustainability requirements , engineering and construction applications with generative AI capabilities have the potential to automate tasks , streamline workflows , improve project delivery , and ensure asset performance .

Generative AI technologies could give engineers the ability to collaborate with AI agents to generate and optimise infrastructure design .

It could compare designs to earlier ones and learn from an engineer ’ s choices . Generative AI could help engineers and construction managers use more sustainable building materials to reduce an asset ' s carbon footprint or calculate an infrastructure project ’ s embodied carbon from start to finish .

Generative AI will give infrastructure engineers , construction contractors , and owner-operators the ability to experiment with real-life developments in a simulated environment , enabling more predictive activities and outcomes that will mitigate future challenges and risks . And that potential is too valuable to ignore .

Can AI address infrastructure project challenges in the Middle East region and beyond ? Yes .

However , there is still foundational work that needs to be done . The simplest and fastest way for infrastructure organisations to get started with AI is by focusing on how data is organised , managed , used , and unused . Organisations that master data management and use digital twins will be best positioned to unlock the potential of AI . p

38 INTELLIGENTCIO MIDDLE EAST www . intelligentcio . com