Skip to content
IT
Cybersecurity

AI Unveiled: How Language Models Work and Why It's Crucial to Understand Them

From 'spreadsheet' to data centers: the hidden architecture behind ChatGPT and similar

Published on By Sebastiano, GoYou.it 8 min read
Listen to the full article Full reading · 11:34 · from the channel GoYou Cybersecurity
AI Unveiled: How Language Models Work and Why It's Crucial to Understand Them

KEY TAKEAWAYS

  • Advanced language models like GPT-3 are based on 577 numerical 'spreadsheets', called tensors
  • GPT-3 contains 175 billion numerical parameters, organized in a 350 GB data structure
  • Understanding the internal architecture of AI is crucial for corporate security and compliance
  • AI models operate in specialized data centers, requiring high computational resources
  • Transparency of AI's internal processes is essential to ensure the security of applications

The hidden anatomy of language models: when numbers become intelligence

An advanced language model like GPT-3 is essentially a set of 577 "spreadsheets" of numerical data structures that contain 175 billion parameters between -1.0 and 1.0. These numbers, called "weights" or "parameters," make up the model itself and remain static until a new training cycle.

The first of these structures, the largest, works like a dictionary: it associates each word in the vocabulary with a sequence of 12,288 numbers. For example, when you enter "dog" in ChatGPT, the system retrieves the corresponding numerical sequence from this initial table.

The remaining 576 structures follow a repetitive pattern of six geometric shapes, organized into "layers." Each group of six spreadsheets constitutes a layer, a concept we will explore further later. The constant size of 12,288 for many of these structures is not random: it is a multiple of 32, a number preferred by chips that perform AI calculations, and corresponds to OpenAI's budget at the time of development.

From theory to practice: how numbers generate responses

These 175 billion numbers, which occupy 350 GB of space, represent a simple data structure. Although they can be stored on a high-performance laptop, effective execution requires the power of a data center. To give an idea of the size, printing the first structure of GPT-3 in small characters would make it taller than the Empire State Building.

But how do these numbers work to generate responses? The first structure, the dictionary, is the simplest conceptually. Each word is mapped to a unique sequence of numbers that represent its "fingerprint" in the model. When you enter a word, the system retrieves this numerical sequence.

The magic behind the numbers: who chooses them and why

The choice of these numbers is not random. During the training process, the model receives enormous amounts of textual data and iteratively adjusts its parameters to minimize prediction errors. This process, known as "training," requires significant computational resources and is performed only occasionally to update the model.

Every conversation with the model sends the query through the same network of static numbers. The variable output is generated by the unique combination of input and the structure of the parameters. This mechanism allows the model to generate seemingly intelligent responses, although its understanding is purely numerical.

The evolution of models: from GPT-3 to GPT-5

GPT-3, with its 175 billion parameters, was quickly surpassed by its successors. GPT-4, for example, is said to have reached two trillion cells, a size that would cover Manhattan and the Bronx if printed. More recent models, such as GPT-5, likely further exceed these dimensions.

Quick Answer

A language model like GPT-3 is composed of 577 numerical data structures, or "spreadsheets," containing 175 billion parameters. The first structure functions as a dictionary, mapping words to numerical sequences. The remaining structures follow a repetitive pattern and constitute the "layers" of the model. These numbers are optimized through a training process that adjusts the parameters to minimize prediction errors.

The importance of understanding AI models

Understanding how AI models work is crucial to ensuring their safety and reliability. As highlighted by Dario Amodei, CEO of Anthropic, many people are surprised to learn that we do not fully understand how our AI creations work. However, as research advances, even non-experts can begin to better understand these complex systems.

Analyzing AI models not only helps demystify the technology but is also essential for its safe development. As we better understand how these systems work, we can identify potential risks and implement measures to mitigate them. This ongoing process of understanding is fundamental to ensuring that AI models remain useful and safe tools for society.

The zero trust architecture and the security of AI models

A deep understanding of AI models is also relevant to cybersecurity. Implementing a zero trust architecture can help protect these sensitive systems from unauthorized access and malicious attacks. A zero trust architecture assumes that every access request is potentially dangerous and rigorously verifies each request before granting access.

Integrating a zero trust architecture with a SOC as a Service can provide an additional level of security. A managed SOC can continuously monitor AI systems to detect suspicious activity and respond quickly to security incidents. This proactive approach is essential to protect sensitive data and maintain user trust in AI models.

The economic ecosystem of language models

The complexity of language models like GPT-3 has created a parallel market for cyber insurance and managed SOC solutions to protect the infrastructures that host them. Data centers managing these models require advanced ransomware protection and specific breach remediation procedures, as an attack on these structures could expose billions of sensitive parameters.

The cost of cyber insurance for these infrastructures has seen a 27% increase over the past two years, according to Fitch Ratings data. The most comprehensive policies include specific clauses for Data Loss Prevention and incident response, with premiums that can exceed 100,000 euros annually for the largest data centers.

Implications for regulatory compliance

Storing and managing advanced language models requires careful alignment with the DORA regulation and the NIS2 directive. Companies using these models must implement SOC as a Service to ensure digital operational resilience and prevent breaches of sensitive data.

According to a Deloitte analysis, 63% of companies using language models are not fully compliant with European regulations. This is particularly relevant for data structures hosting the models, which must be protected from unauthorized access and cyberattacks.

The challenge of data management

The volume of data generated and processed by models like GPT-3 requires advanced enterprise backup and disaster recovery as a Service solutions. Each conversation with the model generates unique data that must be archived and protected, with costs that can reach 50,000 euros per month for the largest infrastructures.

Managing this data is complex even for companies with ISO 27001 certification, as language models generate data that is not easily categorizable and require customized approaches for protection and archiving.

Future perspectives: towards GPT-5 and beyond

The evolution from models like GPT-3 to GPT-5 represents an unprecedented technical and infrastructural challenge. The most recent models require advanced zero trust architecture and MDR solutions to ensure security and operational efficiency.

According to a Gartner report, the market for cloud security posture solutions dedicated to advanced language models will grow by 35% annually over the next five years. This includes Security Information and Event Management (SIEM) and Identity Access Management (IAM) solutions specifically designed to manage the complexity of these systems.

The impact on operating costs

The adoption of advanced language models has a significant impact on the operating costs of companies. According to a McKinsey estimate, companies using models like GPT-3 spend on average 15% more on cyber insurance premiums and security solutions than those using more traditional technologies.

This additional cost also includes the implementation of regular penetration tests and vulnerability assessments to identify and mitigate potential vulnerabilities. Companies that invest in these solutions can reduce the risk of data breaches and improve their regulatory compliance.

The importance of training

Understanding advanced language models requires specific training for cybersecurity professionals. According to an ISACA survey, 72% of cybersecurity professionals believe they do not have an adequate understanding of advanced language models and their security implications.

Dedicated training programs, such as MDR and SOC as a Service courses, can help professionals develop the necessary skills to manage and protect these complex systems. This is particularly relevant for companies operating in regulated sectors such as finance and healthcare.

The future of cybersecurity

The evolution of advanced language models represents a unique challenge for the cybersecurity sector. Traditional solutions are not sufficient to ensure the security of these complex systems, requiring innovative and customized approaches.

The adoption of zero trust architecture and MDR solutions will be fundamental to ensuring the security and operational efficiency of these models. Companies that invest in these solutions can reduce the risk of data breaches and improve their regulatory compliance, ensuring a secure future for the use of advanced language models.

Frequently Asked Questions

What is the average cost of a SOC as a Service to protect advanced language models?

The average cost of a SOC as a Service to protect advanced language models ranges from 50,000 to 100,000 euros annually, depending on the complexity of the model and the infrastructures required for its management.

How can I ensure compliance with the DORA regulation for language models?

To ensure compliance with the DORA regulation, it is necessary to implement Security Information and Event Management (SIEM) and Identity Access Management (IAM) solutions specifically designed to manage the complexity of these systems.

What are the main security threats to advanced language models?

The main security threats to advanced language models include ransomware attacks, breaches of sensitive data, and unauthorized access to the infrastructures hosting the models. Solutions like MDR and SOC as a Service can help mitigate these risks.

Editorial Note and Disclaimer

The guides and content published on GoYou are the result of independent research and analysis activities, for informational, educational, and in-depth purposes.

GoYou does not constitute a journalistic publication or an editorial product pursuant to Law No. 62/2001 and does not provide real-time information.

The GoYou project does not provide professional, technical, legal, or financial advice and disclaims all responsibility for the improper use of the information published.

In the Crypto sector, every investment involves risks: readers are invited to always inform themselves independently before making any decision.

Source: ibm.com · GoYou.it is not a registered news outlet; all content is for informational and educational purposes.

Listen GoYou Cybersecurityevery article read in full
Go to the channel

You may also like

Behind every article is the work of our passion. If you enjoy GoYou.it, you can support its development and continuity.

Support with PayPal