AI Cyber Threats at Warp Speed: Decoding the Attack Flow with MITRE ATLAS

AI Cyber Threats at Warp Speed: Decoding the Attack Flow with MITRE ATLAS

Is your organization ready for the AI Cybersecurity threat wave? What is the role of AI Cybersecurity in a holistic AI Governance program?

What are the Industry partnerships from MITRE that every organization should be aware of and why?

The landscape of AI risk is evolving at an accelerated rate, demanding a security framework built specifically for the unique attack surfaces of Machine Learning and Generative AI. Join host Pamela Gupta as she welcomes Walker Dimon, the MITRE ATLAS Lead, who is focused on advancing security for these rapidly evolving AI systems.

This conversation reveals the critical flow and severity of modern AI threats:

• Mapping the Adversary's Path: The MITRE ATLAS Matrix organizes the progression of attack tactics providing practitioners with a common language and taxonomy for AI threats. 

• New, Realized Threats: The focus has shifted from predictive AI attacks (like data poisoning) to complex generative AI exploits. Walker explains that ATLAS techniques are only added if they are "realized"—meaning there is real-world evidence of actual adversaries using these TTPs against victim systems.

• The LLM Evolution: Learn about the need for new attacks taxonomies, including the recent addition of triggered injection, to capture the delayed adversarial behavior unique to complex Agentic AI systems.

• Walker explains how CISOs can immediately use ATLAS for threat modeling by mapping data flows and user access points to the matrix.

• It is a resource for mitigation strategies, offering strategies and exemplars like using open repository guardrail packages (e.g., Nemo guardrails) to define boundary conditions and prevent system compromise.

Tune in to understand the dynamic nature of AI risks and get actionable guidance on leveraging the MITRE ATLAS Matrix to build trustworthy, safe, and secure AI systems. We discuss Red Teaming, Prompt Injection attacks and a new category introduced "triggered injection".  I had done a deep dive in my last episode on Agentic AI attacks, that was an example of this new attack.

Also, Pamela  poses “Lightening Question - one AI security myth to retire, the most under-hyped attack vector ?”

Walker’s response  may surprise you.

Last, Thanks to our sponsor RecordPoint, you can get more information about their unified data and governance platform.   

Can Trustworthy AI help De-Risk adoption of AI? ‘Can Trustworthy AI can be instrumental in helping organizations gain a competitive edge and promote better business outcomes, including accelerated innovation with AI’.?
With extensive experience in global industry leadership in areas of Business Strategy, Technology, and Cybersecurity, Pamela helps clients in creating a strategic approach to achieving business value with AI by adopting a holistic risk based approach to AI Trust. She defined 8 essential pillars of trustworthy AI. Read more details at Trustedai.ai website.

Her insights have shaped the way we look at the impact of Cyberwarfare on Business, strategies for efficient digital transformation, and governance views on Algorithmic failures.

Join Pamela as she delves into her signature framework, AI TIPS, standing for Artificial Intelligence Trust, Integrity, Pillars and Sustainability. This podcast is all about operationalizing governance and building Trustworthy AI systems from the ground up.

For questions or comments on this podcast reach out to me.