Discover this podcast and so much more

Podcasts are free to enjoy without a subscription. We also offer ebooks, audiobooks, and so much more for just $11.99/month.

How Can Security Be Smart About Using AI? - Jeff Pollard - ASW #253

How Can Security Be Smart About Using AI? - Jeff Pollard - ASW #253

FromApplication Security Weekly (Video)


How Can Security Be Smart About Using AI? - Jeff Pollard - ASW #253

FromApplication Security Weekly (Video)

ratings:
Length:
39 minutes
Released:
Aug 29, 2023
Format:
Podcast episode

Description

We go deep on LLMs and generative AIs to shine a light on areas that security leaders should focus on. There are technical concerns like prompt injection and access controls, and privacy concerns in training and usage. But there are also areas where security tools are starting to address these concerns as well as areas where security tools are adopting AI themselves. We'll share where we see AI showing promise, as well as where we suspect it's still premature. Segment resources: https://www.forrester.com/blogs/defending-ai-models-from-soon-to-yesterday/ https://www.forrester.com/blogs/generative-ai-goes-mainstream-in-security-with-microsoft-security-copilot/ https://www.forrester.com/blogs/chatgpt-cybersecurity-ramifications-beyond-malware/ https://www.forrester.com/report/securing-generative-ai/RES179497 https://www.forrester.com/report/generative-ai-what-it-means-for-security/RES179522   Show Notes: https://securityweekly.com/asw-253 
Released:
Aug 29, 2023
Format:
Podcast episode

Titles in the series (100)

Application Security Weekly decrypts development for the Security Professional - exploring how to inject security into their organization’s Software Development Lifecycle (SDLC) in a fluid and transparent way; Learn the tools, techniques, and processes necessary to move at the speed of DevOps (even if you aren’t a DevOps shop yet). The target audience for Application Security Weekly spans the gamut of Security Engineers and Practitioners that need to level-up their skills in the Application Security space - as well as enabling “Cyber Curious” developers to get involved in the Application Security process at their organizations. To a lesser extent, we hope to arm Security Managers and Executives with the knowledge to be conversational in the realm of DevOps - and to provide the right questions to ask their colleagues in development, along with the metrics to think critically about the answers they receive.