Security Strategy in the AI Era: Palo Alto Networks' Battle Against the "Invisible Enemy"

This article explains the current state of cyberattacks, future prospects, the potential of AI, and management philosophy based on an interview with Nikesh Arora, CEO of the cybersecurity giant Palo Alto Networks (PANW). The interviewer is Nicolai Tangen, CEO of the Norwegian Government Pension Fund, and the discussion covers the increasingly globally significant topics of "cybersecurity" and the "rapid development of AI technology" in a candid conversation.

This article is structured with specific examples and quotes so that both beginners and practitioners can understand the professional content. We will delve into a wide range of topics, including the mechanisms of cyberattacks, the characteristics of attackers, the relationship with AI, and the mindset required of a business leader.

1. The Importance of Cybersecurity and the Role of Palo Alto Networks

1-1. Expansion of the "Attack Surface" in the Digital Age

"Our job is to protect companies, governments, and individual systems from being hacked," states Nikesh Arora. In modern society, everything from smartphones to public infrastructure and even autonomous vehicles is connected to a network. As a result, the "attack surface" has expanded more than ever, increasing the possibility for malicious attackers to infiltrate systems.

For example, if you imagine the possibility of an autonomous vehicle being hacked, the danger is clear. According to Arora, this attack surface is expected to "continue to expand explosively" in the future, making it necessary to strengthen defenses using real-time and sophisticated methods.

1-2. "Attackers only need to succeed once; the defenders must succeed every time"

Arora emphasizes the "unfair conditions" where "attackers only need to succeed once to achieve their goal, while the defense side is expected to be perfect at all times." In recent large-scale cyberattacks, there has been an increase in cases where not only specific companies or infrastructure are targeted, but the "supply chain" itself is attacked. This is because by infiltrating the core of the software or hardware used by major companies, it becomes possible to attack numerous targets with a single breakthrough.

To respond to this situation, highly advanced detection and defense systems incorporating cutting-edge technologies like AI are required. While focusing on traditional firewall products, PANW has developed technology that uses AI to instantly judge cyber threats and block them quickly.

2. The Evolution of AI and Its Impact on Cybersecurity

2-1. "New Era Threats" and the "Evolution of Defense" through AI

"AI will change everything," says Arora, analyzing that as machine learning and large language models become dramatically smarter, a major turning point will arrive for the cybersecurity industry. On the other hand, since AI can be used for both "good and evil," there is a risk that the attacking side will also use AI capabilities to become more sophisticated and faster.

However, at the same time, by utilizing AI, the defense side can create digital analysts with "infinite memory and pattern recognition capabilities," making it easier to detect subtle signs that were previously overlooked. In this way, the "cat-and-mouse game" of attack and defense surrounding AI is expected to intensify.

2-2. What Determines Success or Failure in the AI Era?

Arora says, "The attacking side does not necessarily need to have vast computer resources." The issue is not the large-scale computing resources themselves, but how to master the sophisticated "brain (AI model)" generated from them.

Once a cutting-edge AI model is completed, it can be deployed to smartphones and edge devices. From there, "decentralization" will progress for both attack and defense, and for companies and governments, the dilemma that "the more AI spreads, the more vulnerabilities lurk everywhere" will intensify. Therefore, Arora sounds the alarm, stating, "Strong guardrails are necessary for the introduction of AI, but it is difficult to completely recall AI technology once it has spread."

3. The Reality of Cyberattacks and Attacker Motivations

3-1. From "Individual Hackers" to "State Actors"

Previously, the focus was on young people who "hacked like a game in their parents' basement," but now, ransomware attacks to gain massive economic profits and highly sophisticated attacks supported by states (Advanced Persistent Threat: APT) have become prominent. Cases where state-affiliated groups from Russia, China, North Korea, and others launch attacks on critical infrastructure, including supply chains, are increasing, and there are movements to utilize cyberspace as part of military and diplomatic efforts.

3-2. Supply Chain Attacks and Infrastructure Attacks

Supply chain attacks, which "attack the infrastructure that a target relies on rather than the target itself," are becoming a serious threat to corporate and government networks. The background for this is their efficiency: by targeting hardware and software update processes, attackers can involve a large number of users once they gain entry. In addition, infrastructure such as power, water, and telecommunications is often targeted because of aging systems and patchwork network connections, which result in a "wide attack surface."

4. Points for Executives and Investors to Keep in Mind

4-1. Basic Security "Hygiene Management"

Mr. Arora points out the tendency for "attacks to start from the most vulnerable system," emphasizing that it is crucial for companies and organizations not to neglect minimum security measures. Specifically, there is legislation for cyber requirements for critical infrastructure companies, and strict standards exist from regulatory authorities in the financial sector. Investors should also check the security levels of their portfolio companies and determine whether their basic "hygiene management" is sufficient.

4-2. From "Complete Defense" to "Cyber Resilience"

A key phrase in recent years is "assuming that attacks will happen, how quickly can we recover?" In addition to "preventing" cyberattacks, both companies and government agencies are prioritizing recovery speed and processes for minimizing damage when they are hit. Thorough multi-layered defense, data backup, and segmentation are essential, and how quickly an organization can recover from a "worst-case scenario" is its lifeline.

5. Perspectives on Management and Leadership

5-1. Lessons Learned from Experience at Google and SoftBank

Mr. Arora has worked at two giant companies in the past: Google and SoftBank. He says he was exposed to a culture at Google where "improving product quality is the top priority," and at SoftBank, he learned the spirit of "taking big bets without fearing risk." By combining these seemingly polar opposite values, he implements a management style at PANW of "releasing the best products to the world quickly and acting boldly."

5-2. The Gap at the Time of CEO Appointment and Rapid Growth

Mr. Arora jokingly says, "I didn't meet a single condition for being chosen as the CEO of a cybersecurity company." However, the PANW board of directors at the time expected, "Since we have 5,000 security experts, we want a vision to lead the company rather than practical security knowledge." Since then, he has deployed an aggressive strategy, including M&A of over 20 companies, and PANW's market capitalization has grown from its initial $18 billion to approximately $120 billion.

Just as Mr. Arora "held meetings with hundreds of security companies," his "thorough input" when jumping into a new field is the key that supports his success.

6. Future Outlook in the AI Era

6-1. Platformization and Comprehensive Collaboration

PANW initially had a strong image as a "firewall specialist," but in recent years, it has offered a comprehensive lineup of 24 products ranging from cloud to network analysis and zero trust, launching a "platform strategy." The goal is to achieve advanced defense and operational efficiency by organically linking these products, rather than just having "individually excellent solutions." In the AI era, mechanisms where individual products collaborate and share data seamlessly will become increasingly important.

6-2. New Industrial Structure and Winners Brought by AI

Mr. Arora predicts that "the structure of consumer applications and enterprise software will change fundamentally over the next 5 to 10 years." If AI agents become widespread, traditional UI (user interface) design and software models that earn license fees based on seat counts (number of users) may be shaken to their core.

On the other hand, there is a high possibility that new platform leaders will emerge. There may be cases where existing giant companies adapt to AI and survive, or it is entirely possible that startups will transform the market with first-principles thinking. It can be said that PANW's strategy is to prepare a "defensive posture to anticipate and stay ahead of all changes."

7. Personal Profile and Leadership

7-1. Common Traits of CEOs from India

Mr. Arora is a graduate of the Indian Institute of Technology, and he cites the 'resilience of a generation raised in resource-poor environments,' a 'strong orientation toward technical disciplines,' and a 'continuous learning mindset' as common traits among prominent executives from India. The fact that so many CEOs of major corporations are of Indian origin can be analyzed as the result of 'persistent effort' combined with 'engineering-based thinking.'

7-2. A Personal Side: Family and Friends as the Foundation

No matter how large the company becomes, he says that 'time with family is the foundation for regaining humility and a sense of balance.' Mr. Arora has children aged 9 and 8, and he values time spent with his family, such as watching his children's soccer and basketball games on weekends. No matter how heavy the responsibilities he bears as 'CEO' at the company, returning home to be just a father, and being treated as an ordinary father by his children, actually provides him with a realistic perspective in a positive sense.

With the rapid advancement of digital society and AI technology, the importance of cybersecurity is increasing even further. As the attack surface continues to expand and attack methods become more diverse and sophisticated, the defense side must shift from 'absolute defense' to 'strengthening resilience' and incorporate advanced countermeasures using AI.

Palo Alto Networks, led by Nikesh Arora, is actively incorporating cloud and AI, aiming for comprehensive defense through platformization. Behind this lies a 'relentless focus on products,' 'investment without fear of risk,' and 'foresight based on first principles,' and these fundamental stances will continue to be the source of corporate competitiveness in the coming era of technological transformation.

Finally, I would like to quote Mr. Arora.

While technological progress brings great benefits, it also has a side that creates new threats. The steering of the cybersecurity industry, which takes on the challenge of facing these threats and protecting society, will become increasingly indispensable to society in the future.

Related Articles