AI Defense: Mastering Oracles & Offense for Security #shorts

And um therefore my call out is really to you who owns the oracles owns the IRA and with this thank you very much uh for your attention. Now to summarize um with my last slide there there are three takeaways from from that and the first one is obviously we need to focus ourself more on this mechanical verifies on the oracles rather than on detections and what it means is um you know um first of all even if you're buying vendor solutions ask them how they are verifying on a constant basis they detections stop really focusing on solutions which are trying to automate process unless you know that the process is tested against a specific set of

deterministic ver verifiable oracles. Second one is obviously offense is leading. We are seeing this everywhere and they're winning this race of oracles and verifiers and that's why the best thing we can do is just to adopt this as well and start using offense 24 by7 within our environments. So we can learn from that. I think it's totally possible right now with all the different um research and and tools coming out. Um how cool would it be to have this continuously red team are testing your environments and really helping you as well to make sure you understand your priorities, what to focus at. And then last but not least, and this is a big topic for the industry and not just for

you as end users, is how do we build better cyber gyms? Because we understand now the point what I've mentioned at the beginning models don't generalize on private company data. We start to see across many domains that agents can help with this. So either you give access to the vendors to train their models on you specific environment and I know there's a lot of push back or we built really good test bed environment which are generalizing across this environment. So we can trust uh train much more better models and then have this environments a shared environments. Now I've opened up this um you know this talk with um um with um the question if we're in AI winter or if the springtime

is starting. And I start I think we start to see that again AI offense is dominating and I think in defense we need to stop serving the spaghetti alerts and um therefore my call out is really to you who owns the oracles owns the ira and with this thank you very much uh for your attention.