RSAC 365 Virtual Seminar: Intersection of AI & Security

September 5, 2024 | 11:00 AM ET in Virtual Seminars

PART 1: Leadership Panel

AI promises to improve productivity and efficiency, but do organizations have realistic expectations and a plan for responsible use? This panel will discuss the realistic expectations and responsible use of AI share ideas to help leaders develop a strategy for implementing AI for cybersecurity while preparing to combat AI-driven cyber threats.

Moderator: Laura Koetzle, VP, Group Research Director, Forrester Research

Panelists: Sherron Burgess, CISO, BCD Travel, Arif Hameed, CISO, C&R Software, Royce Markose, CISO, Vistrada, and Chris Walcutt, CISO, DirectDefense, Inc.

PART 2: Choose your track, Interactive Discussion or Traditional Session

These sessions are coinciding and attendees are free to move within sessions as they wish.

The Interactive Discussion will follow Chatham House Rule to allow for free exchange of information and learning. We look forward to participants actively engaging in the discussion and remind attendees that no comment attribution or recording of any sort should take place. Media are not permitted to attend.

	Interactive Discussion	Traditional Session
Session 1	Embracing AI (and Its Risks) While integrating AI into system processes can level up cybersecurity defenses, embracing new technology always comes with a new set of risks. From managing vendors to employee misuse, ethical concerns, copyright infringement, and data protection, companies must ensure they are proactively understanding and mitigating the risks presented by AI. In this Birds of a Feather discussion, participants will share perspectives on the controls and steps needed to minimize risk when embracing AI. Speaker: Mike Silverman, VP Strategy and Innovation, FS-ISAC	A Checklist for CISOs This session will cover where to start and discuss the guidance for CISOs published in the OWASP for LLMs CISO Checklist, which includes contributions from a cross-section of security experts. Speaker: Sandy Dunn, Serial CISO, Adjunct Professor, Boise State
Session 2	How AI Impacts Organizations: The Good, The Bad, and The Ugly As artificial intelligence (AI) continues to revolutionize various industries, it also presents new challenges in the realm of fraud prevention. This discussion will explore the convergence of AI and fraudulent activities, (including deepfakes, voice spoofing, and sophisticated phishing techniques) focusing on emerging threats and their implications for organizations. Join to navigate the intricate landscape where technology meets deception and learn how organizations can adapt to protect their assets and customers. Speaker: Jackie Deloplaine, Cyber Intelligence Engagement Manager, RH-ISAC	Introducing a Solutions Framework for LLMs, GenAI Security This session will introduce a new draft framework, published by the project, to help decision makers with categories for security solutions aligned to secure against the LLMs Top 10 Across the LLM application lifecycle. Speaker: Scott Clinton, OWASP T10 for LLM Industry Lead
Session 3	Security vs Compliance - Do I have to choose? Over the past year and a half or so, there have been regulations regarding cybersecurity and mandatory incident reporting. These regulations can have the unintended effect of increasing risks as companies divert limited resources from security to compliance. Throughout this conversation, attendees will discuss their strategies and efforts to adhere to compliance while protecting pivotal security resources. Speaker: Scott Algeier, Executive Director, IT-ISAC	Creating and Detecting Machine Learning Model Serialization Attacks Machine Learning (ML) model hubs are making supply chain attacks possible through ML models. This session will demonstrate how ML models can have malicious code embedded in them during serialization (saving), called Model Serialization Attack (MSA). Attendees will see the step-by-step process to become proficient at both crafting their own MSA and safeguarding against MSA. Speaker: Mehrin Kiani, Machine Learning Scientist, Protect AI and Sam Washko, Software Engineer, Protect AI

Interactive Discussion

Traditional Session

Session 1

Embracing AI (and Its Risks)

While integrating AI into system processes can level up cybersecurity defenses, embracing new technology always comes with a new set of risks. From managing vendors to employee misuse, ethical concerns, copyright infringement, and data protection, companies must ensure they are proactively understanding and mitigating the risks presented by AI. In this Birds of a Feather discussion, participants will share perspectives on the controls and steps needed to minimize risk when embracing AI.

Speaker:
Mike Silverman, VP Strategy and Innovation, FS-ISAC

A Checklist for CISOs

This session will cover where to start and discuss the guidance for CISOs published in the OWASP for LLMs CISO Checklist, which includes contributions from a cross-section of security experts.

Speaker:
Sandy Dunn, Serial CISO, Adjunct Professor, Boise State

Session 2

How AI Impacts Organizations: The Good, The Bad, and The Ugly

As artificial intelligence (AI) continues to revolutionize various industries, it also presents new challenges in the realm of fraud prevention. This discussion will explore the convergence of AI and fraudulent activities, (including deepfakes, voice spoofing, and sophisticated phishing techniques) focusing on emerging threats and their implications for organizations. Join to navigate the intricate landscape where technology meets deception and learn how organizations can adapt to protect their assets and customers.

Speaker:
Jackie Deloplaine, Cyber Intelligence Engagement Manager, RH-ISAC

Introducing a Solutions Framework for LLMs, GenAI Security

This session will introduce a new draft framework, published by the project, to help decision makers with categories for security solutions aligned to secure against the LLMs Top 10 Across the LLM application lifecycle.

Speaker:
Scott Clinton, OWASP T10 for LLM Industry Lead

Session 3

Security vs Compliance - Do I have to choose?

Over the past year and a half or so, there have been regulations regarding cybersecurity and mandatory incident reporting. These regulations can have the unintended effect of increasing risks as companies divert limited resources from security to compliance. Throughout this conversation, attendees will discuss their strategies and efforts to adhere to compliance while protecting pivotal security resources.

Speaker:
Scott Algeier, Executive Director, IT-ISAC

Creating and Detecting Machine Learning Model Serialization Attacks

Machine Learning (ML) model hubs are making supply chain attacks possible through ML models. This session will demonstrate how ML models can have malicious code embedded in them during serialization (saving), called Model Serialization Attack (MSA). Attendees will see the step-by-step process to become proficient at both crafting their own MSA and safeguarding against MSA.

Speaker:
Mehrin Kiani, Machine Learning Scientist, Protect AI and Sam Washko, Software Engineer, Protect AI