Smarter Attacks, Stronger Defenses: Security in the AI Era

Well, yeah, there's a lot of different themes.

One, a lot of questions about AI.

AI this, AI that.

Cause of and solution to all of our problems, clearly.

In the security world, we tend to talk about AI as the evil bad thing or whatever, but I've been trying to spin it a little bit.

Turns out we can use it as a force multiplier for good.

Absolutely.

How can we do that? I gave a session just recently, just a few hours ago, and we kind of ended with that.

The things that we could use AI for to help secure our environments and things like that.

How do we secure all this AI stuff? We want to run it ourselves.

So that's a big theme.

Second theme, you know, patching, a lot of the getting up to 9.1, you know, so VCF 9.1 got a whole bunch of features in it.

We've really spun the roadmap around to be security feature first here, as a response to all of the stuff that's going on in the greater software ecosystem, open source, all that stuff.

So we're really security first there, developing new features and functionality, new patching strategies, new patch release strategies, monthly patching, things like that.

And so a lot of questions about that, how that's going to work, live patching, what's going to be live patchable, what's not live patchable, because not everything can be live patchable, for example.

And so, yeah, big things like that, you know, and just everyone just trying to all of the security emphasis lately, it's like we're paying down years and years of technical debt all at once here.

All of the security that we should have been doing all along here But we didn't have to because the attackers just weren't that scary compared to...

Well, they were scary, but not compared to what we're seeing

now.

Yeah, honestly, that was one of the eye-openers for me when I read an article about, you know, like, vulnerabilities in code that's, like, 20 years old that, like, you would have thought was...

It's been there forever.

Right.

Yeah,

well, the more eyes make all bugs shallow sort of thing isn't necessarily true.

There's some really arcane stuff that these AIs are really able to find, you know, and what do you do with that? How do you deal with that? So...