Guest:

Topics:

Can you explain the concept of "MLSecOps" as an analogy with DevSecOps, with 'Dev' replaced by 'ML'? This has nothing to do with SecOps, right?
What are the most critical steps a CISO should prioritize when implementing MLSecOps within their organization? What gets better when you do it?
How do we adapt traditional security testing, like vulnerability scanning, SAST, and DAST, to effectively assess the security of machine learning models? Can we?
In the context of AI supply chain security, what is the essential role of third-party assessments, particularly regarding data provenance?
How can organizations balance the need for security logging in AI systems with the imperative to protect privacy and sensitive data? Do we need to decouple security from safety or privacy?
What are the primary security risks associated with overprivileged AI agents, and how can organizations mitigate these risks?
Top differences between LLM/chatbot AI security vs AI agent security?

Resources:

EP224 Protecting the Learning Machines: From AI Agents to Provenance in MLSecOps

Cloud Security Podcast by Google