AI Risks - Building on Zero Trust Security for Google #shorts #podcast #security #zerotrust #AI

Do you think that zero trust for AI is a real thing? Fortunately, the problems that zero trust is attempting to solve are still with us. We just also have a whole new set of wrinkles that we've added with AI. And if you sort of start from the premise that I am coming from, which is that we need to create this container to sort of manage the scope of AI access, I mean, the ability to manage that container, I think fundamentally is taking the concepts from zero trust around Managing scopes of identities, managing scopes of data, integrating them and fusing them together. And so I think that from my point of view, managing these AI risks using deterministic constraints builds on zero trust technology. And so I think building on zero trust as a foundation to manage AI is an important direction for many organizations, including Google.

You think that zero trust for AI is a real thing? It's not just like a 2 crazy hot acronyms clash and who knows what happens. There's a reality behind the different— yeah, you're on point. I mean, I think it's—

so look, I think it's both, right? Like, frankly, one of the problems that zero trust— Both hype and reality? Yeah. I mean, both. One of the problems that zero trust has had since the beginning of time has been disentangling, like, what are we actually saying from what is the sort of hype going on? But I think if you sort of come at it from the perspective of, like, what are we actually saying? In the zero trust space, we're talking about using identity and data as a foundational security control and not just sort of a layer for managing insider risk inside of some outer network perimeter, which is maybe historically the role that identity played in many organizations. And if you sort of accept that premise, then I think you can build responsive security technologies for novel AI risks on top of it.