Identity is the new perimeter. What does this mean in times of AI – both on the offensive and the defensive side?
💡 Rohit Ghai talks about this in an inspiring keynote at RSA Conference 2023. Well worth watching!
https://www.youtube.com/watch?v=plMlFAxHJ6s
What a good start into the weekend 😎 📄 The German BSI has published a guideline for developers regarding potential vulnerabilies in AI systems. 📣 From my point of view, a security risk assessment on systems using AI technologies has to consider the attacks on the AI parts of the system as well. A security…
There is a job advert for a Windows 3.11 administrator role in the rail industry doing the rounds on the internet right now – e.g. here at Heise. It’s often accompanied by the question why such old systems are still in use – it’s 2024! Yes, this is the reality of OT systems – not…
🎁 Christmas is coming and I’ve got a gift! 🎁 ✨Thank you Verband Deutscher Eisenbahn-Ingenieure e.V. (VDEI) for the nice present for being a speaker for ICS – Informatik Consulting Systems at last week’s rail security conference in Darmstadt. 📅 The calendar got a prominent spot in my office and will be with me for…
Real time AI applications can bring huge benefits but also come with (social) risks we will have to deal with. The example below is a good demonstration of what is possible today. I’m very curious regarding the public discussion on how we will balance benefits vs. risks of such applications without killing technological progress in…
This morning I’m on the way to Frankfurt for ICS – Informatik Consulting Systems participating at a DKE security working group meeting regarding standardisation of railway security.
Despite the Easter holidays, a lot of incredible work was done over the weekend by many researchers analysing the details of the xz-utils backdoor. Some examples are: As the situation unfolds, it is becoming clear that this was not just one of the most sophisticated technical (perhaps the most sophisticated) attempts to introduce a backdoor…