Securing Artificial Intelligence (AI) By Design

Date: 11/19/2024

Vendor: Palo Alto Networks

Technology/Topic: Securing Artificial Intelligence (AI) By Design

______________________________________________

Welcome to the Technical Exchange Meeting (TEM)!

As the recently released AI NSM reinforces, the promise of AI to support national security missions is undeniable, but the proliferation of AI infrastructure creates a rapidly expanding AI attack surface that presents unique data security and network security challenges.

In fact, research indicates that 50% of employees currently use AI apps without permission in their enterprise, 80% of public models can be “jailbroken” (bypassing restrictions installed by model creators), and there are already hundreds of malicious models available in the wild. In sum, AI app and model proliferation is changing how enterprises operate and necessitates an evolved security approach.

We like to think of this approach as Securing AI By Design. This approach aligns with the security concepts and controls already included in the NIST AI Risk Management Framework and the joint-sealed (NSA/FBI/CISA/FVEY) guidance on Deploying AI Systems Securely. With AI infrastructure, security cannot be an afterthought. It’s critical that we focus on securing AI by design today, so that we can have confidence in the integrity and resilience of the AI-powered systems that the warfighter depends upon.

Palo Alto Networks is the only cyber security platform that offers a comprehensive security framework and solutions to:

1. Discover, Classify and Govern AI Applications

2. Protect AI Applications in Runtime

3. Secure the AI Development Supply Chain

______________________________________________

To join the DISA TEM mailing list, please contact: disa.tem@mail.mil

______________________________________________

Disclaimer:

— TEMs do not serve as a marketing venue or request for proposal actions.

— TEMs shall not be interpreted as a commitment by the Government to issue a solicitation or ultimately award a contract.

— TEMs do not serve as an endorsement of any presented technologies or capabilities

— Presentations will not be considered as proposals nor will any awards be made as a result of a TEM session.

— TEMs are public open forums – no proprietary or sensitive information should be presented during TEM sessions. Only publicly-facing content is permissible in DISA TEM sessions.