Silver Bullet Security Podcast

On Episode 161 of the Silver Bullet Security Podcast, BIML’s Gary McGraw hosts Christoph Kern. Christoph talks about software security by construction and the importance of architecture, wiping out entire classes of bugs at Google, why mixing control and data in one untyped token stream is rather silly,  agentic AI security from tool wielders to massive swarms.  We end on a positive note, by emphasizing the important of human intuition, ingenuity and insight to architectural beauty.

• Silver Bullet episode 100: IEEE Center for Secure Design
• Christoph Kern - Google Research
• Secure by Design at Google
• IEEE Center for Secure Design Avoiding the Top Ten Software Security Design Flaws

On Episode 160 of the Silver Bullet Security Podcast, BIML’s Gary McGraw hosts Aaron Bedra. Aaron talks about enterprise adoption of AI/ML from his perspective at the intersection of security engineering and executive leadership; the shocking pace of ML evolution; ML grinding on the security exploit front; MLsec (including recursive pollution); and the problem of Agentic swarm control.  MLsec meets the real world.

• Aaron Bedra - DRW | LinkedIn
• Programming Clojure, Third Edition
• abedra (Aaron Bedra) · GitHub
• BIML on recursive pullution
• Silver Bullet episode 097: Aaron Bedra, 4.30.14

On Episode 159 of the Silver Bullet Security Podcast, BIML’s Gary McGraw hosts Melanie Mitchell.  Melanie talks about the surprising progress made in AI since the '90s, whether real concepts emerge from data scale alone, whether modern connectionist systems extrapolate or only interpolate, and what humans do differently.  We also talk about the complex innards of modern transformer networks, measuring alien intelligences, role playing, sycophancy, and security, and why giving answers is easier than posing interesting questions.

• FARG and Douglas Hofstadter
• Copycat
• The NeuriPS keynote
• BIML's measurement work
• Santa Fe Institute

On Episode 158 of the Silver Bullet Security Podcast, BIML’s Gary McGraw hosts Artem Dinaburg.  Artem talks about using Agentic AI to find, fix, and exploit software security defects.  We talk decompilation, stochasticism and the tension between harness development and LLM nondeterminism, human intuition, and the hard parts of program analysis.  We also talk about MLsec (machine learning security), recursive pollution, and tokenization.  Do we need more people in software security in the age of AI?  Yes we do.

• Trail of Bits
• Mastadon
• Evaluating Solidity support in AI Coding Assistants
• Researchgate

On Episode 157 of the Silver Bullet Security Podcast, BIML’s Gary McGraw hosts Tim Schulz.  Tim talks about whitebox control and observability in machine learning systems (and especially transformer architectures), the limits of red teaming for securing AI,  "neural surgery,"  Agentic AI and the confused deputy problem, and the economics of network "smallification."

• Starseer
• Whitebox machine learning and looking inside networks
• Anthropics circuits thread
• Agentic AI and intention

On Episode 156 of the Silver Bullet Security Podcast, BIML’s Gary McGraw hosts Phil Venables.  Phil talks about the evolution of the CISO role from running an engineering team in the '90s back into running an engineering team in the mid-2020s, Agentic AI and tools using tools, the rise of machine learning security, when we might see an AI BSIMM, emergent computation and security control, and what role humans can play in AI rollout.

• Phil Venables at Ballistic
• Scaling Security, AI, and more
• Cloud CISO Perspectives
• BSIMM archive, coalition for secure AI

On Episode 155 of the Silver Bullet Security Podcast, BIML's Gary McGraw hosts Giovanni Vigna.  Giovanni talks about the evolution of software exploit and AI, what has happened in the security field since 2011 (and episode 65), getting inside connectionist networks to see what is actually happening, and what it means to be a human hacker with intuition and intention.

• Giovani Vigna
• iCTF
• Artiphishell
• The ACTION institute

On Episode 154 of the Silver Bullet Security Podcast, Gary McGraw hosts Gadi Evron.  Gadi talks about the [un]prompted conference and its focus on fundamental aspects of machine learning security. The conversation touches on current approaches to MLsec, the words we use to describe AI security issues, and how quickly the field is evolving.

Links

• Gadi Evron https://www.knostic.ai/about-us
• [un]prompted https://unpromptedcon.org/
• badness-ometer https://blog.citp.princeton.edu/2006/02/16/software-security-badness-ometer/
• recursive pollution https://berryvilleiml.com/2026/01/10/recursive-pollution-and-model-collapse-are-not-the-same/

Welcome back to the Silver Bullet Security Podcast, created and hosted by the Berryville Institute of Machine Learning, where we are defining the future of machine learning security.  From 2006-2018, we explored the nascent field of software security through the lens of building security in.  But today, the frontier has moved.  As we integrate machine learning into the fabric of our essential systems, we find ourselves facing a new set of architectural flaws and security challenges that traditional software security can’t touch.  On Silver Bullet, we’re shifting our focus to the security of machine learning—bringing the same deep-dive, “no silver bullet” philosophy to the world of AI.

The first (154th) episode launches soon.