This is the audio podcast version of Troy Hunt's weekly update video published here: https://www.troyhunt.com/tag/weekly-update/
…
continue reading
Content provided by Anton Chuvakin. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Anton Chuvakin or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.
Player FM - Podcast App
Go offline with the Player FM app!
Go offline with the Player FM app!
EP226 AI Supply Chain Security: Old Lessons, New Poisons, and Agentic Dreams
MP3•Episode home
Manage episode 483721268 series 2892548
Content provided by Anton Chuvakin. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Anton Chuvakin or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.
Guest:
Christine Sizemore, Cloud Security Architect, Google Cloud
Topics:
- Can you describe the key components of an AI software supply chain, and how do they compare to those in a traditional software supply chain?
- I hope folks listening have heard past episodes where we talked about poisoning training data. What are the other interesting and unexpected security challenges and threats associated with the AI software supply chain?
- We like to say that history might not repeat itself but it does rhyme – what are the rhyming patterns in security practices people need to be aware of when it comes to securing their AI supply chains?
- We’ve talked a lot about technology and process–what are the organizational pitfalls to avoid when developing AI software? What organizational "smells" are associated with irresponsible AI development?
- We are all hearing about agentic security – so can we just ask the AI to secure itself?
- Top 3 things to do to secure AI software supply chain for a typical org?
Resources:
- Video
- “Securing AI Supply Chain: Like Software, Only Not” blog (and paper)
- “Securing the AI software supply chain” webcast
- EP210 Cloud Security Surprises: Real Stories, Real Lessons, Real "Oh No!" Moments
- Protect AI issue database
- “Staying on top of AI Developments”
- “Office of the CISO 2024 Year in Review: AI Trust and Security”
- “Your Roadmap to Secure AI: A Recap” (2024)
- "RSA 2025: AI’s Promise vs. Security’s Past — A Reality Check" (references our "data as code" presentation)
227 episodes
MP3•Episode home
Manage episode 483721268 series 2892548
Content provided by Anton Chuvakin. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Anton Chuvakin or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.
Guest:
Christine Sizemore, Cloud Security Architect, Google Cloud
Topics:
- Can you describe the key components of an AI software supply chain, and how do they compare to those in a traditional software supply chain?
- I hope folks listening have heard past episodes where we talked about poisoning training data. What are the other interesting and unexpected security challenges and threats associated with the AI software supply chain?
- We like to say that history might not repeat itself but it does rhyme – what are the rhyming patterns in security practices people need to be aware of when it comes to securing their AI supply chains?
- We’ve talked a lot about technology and process–what are the organizational pitfalls to avoid when developing AI software? What organizational "smells" are associated with irresponsible AI development?
- We are all hearing about agentic security – so can we just ask the AI to secure itself?
- Top 3 things to do to secure AI software supply chain for a typical org?
Resources:
- Video
- “Securing AI Supply Chain: Like Software, Only Not” blog (and paper)
- “Securing the AI software supply chain” webcast
- EP210 Cloud Security Surprises: Real Stories, Real Lessons, Real "Oh No!" Moments
- Protect AI issue database
- “Staying on top of AI Developments”
- “Office of the CISO 2024 Year in Review: AI Trust and Security”
- “Your Roadmap to Secure AI: A Recap” (2024)
- "RSA 2025: AI’s Promise vs. Security’s Past — A Reality Check" (references our "data as code" presentation)
227 episodes
All episodes
×Welcome to Player FM!
Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.