Oron Noah of Wiz outlines how organizations evolve their security practices to address new vulnerabilities in AI systems through improved visibility, risk assessment, and pipeline protection.
Topics Include:
- Introduction of Oron Noah, VP at Wiz.
- Wiz: largest private service security company.
- $1.9 billion raised from leading VCs.
- 45% of Fortune 100 use Wiz.
- Wiz scans 60+ Amazon native services.
- Cloud introduced visibility challenges.
- Cloud created risk prioritization issues.
- Security ownership shifted from CISOs to everyone.
- Wiz offers a unified security platform.
- Three pillars: Wiz Cloud, Code, and Defend.
- Wiz democratizes cloud security for all teams.
- Security Graph uses Amazon Neptune.
- Wiz has 150+ available integrations.
- Risk analysis connects to cloud environments.
- Wiz identifies critical attack paths.
- AI assists in security graph searches.
- AI helps with remediation scripts.
- AI introduces new security challenges.
- 70% of customers already use AI services.
- AI security requires visibility, risk assessment, pipeline protection.
- AI introduces risks like prompt injection.
- Data poisoning can manipulate AI results.
- Model vulnerabilities create attack vectors.
- AI Security Posture Management (ASPM) introduced.
- Four key questions for AI security.
- AI pipelines resemble traditional cloud infrastructure.
- Wiz researchers found real AI security vulnerabilities.
- Wiz AI ASPM provides agentless visibility.
- Supports major AI services (AWS, OpenAI, etc.).
- Built-in rules detect AI service misconfigurations.
Participants:
See how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon/isv/