Security leaders from CyberArk, Fortra, and Sysdig share actionable strategies for securely implementing generative AI and reveal real-world insights on data protection and agent management.
Topics Include:
- Panel explores practical security approaches for GenAI from prototype to production
- Three-phase framework discussed: planning, pre-production, and production security considerations
- Security must be built-in from start - data foundation is critical
- Understanding data location, usage, transformation, and regulatory requirements is essential
- Fortra's security conglomerate approach integrates with AWS native tools and partners
- Machine data initially easier for compliance - no PII or HIPAA concerns
- Identity paradigm shift: agents can dynamically take human and non-human roles
- 97% of organizations using AI tools lack identity and access policies
- Security responsibility increases as you move up the customization stack
- OWASP Top 10 for GenAI addresses prompt injection and data poisoning
- Rigorous model testing including adversarial attacks before deployment is crucial
- Sysdig spent 6-9 months stress testing their agent before production release
- Tension exists between moving fast and implementing proper security controls
- Different security approaches needed based on data sensitivity and model usage
- Zero-standing privilege and intent-based policies critical for agent management
- Multi-agent systems create "Internet of Agents" with exponentially multiplying risks
- Discovery challenge: finding where GenAI is running across enterprise environments
- API security and gateway protection becoming critical with acceptable latency
- Top customer need: translating written AI policies into actionable controls
- Threat modeling should focus on impact rather than just vulnerability severity
Participants:
- Prashant Tyagi - Go-To-Market Identity Security Technology Strategy Lead, CyberArk
- Mike Reed – Field CISO, Cloud Security & AI, Fortra
- Zaher Hulays – Vice President Strategic Partnerships, Sysdig
- Matthew Girdharry - WW Leader for Observability & Security Partnerships, Amazon Web Services
Further Links:
- CyberArk: Website – LinkedIn – AWS Marketplace
- Fortra: Website – LinkedIn – AWS Marketplace
- Sysdig: Website – LinkedIn – AWS Marketplace
See how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/