Uncategorized

Mental Model for Generative AI Risk and Security Framework

Published

3 months ago

June 20, 2024

mental-model-for-generative-ai-risk-and-security-framework

Generative artificial intelligence (generative AI) has captured the imagination of organizations and is transforming the customer experience in industries of every size across the globe. This leap in AI capability, fueled by multi-billion-parameter large language models (LLMs) and transformer neural networks, has opened the door to new productivity improvements, creative capabilities, and more.
As organizations evaluate and adopt generative AI for their employees and customers, cybersecurity practitioners must assess the risks, governance, and controls for this evolving technology at a rapid pace. As a security leader working with the largest, most complex customers at various cloud providers, I’m regularly consulted on trends, best practices, and the rapidly evolving landscape of generative AI and the associated security and privacy implications. In that spirit, I’d like to share key strategies that you can use to accelerate your own generative AI security journey.
This post, the first in a series on securing generative AI, establishes a mental model that will help you approach the risk and security implications based on the type of generative AI workload you are deploying. We then highlight key considerations for security leaders and practitioners to prioritize when securing generative AI workloads. Follow-on posts will dive deep into developing generative AI solutions that meet customers’ security requirements, best practices for threat modeling generative AI applications, approaches for evaluating compliance and privacy considerations, and explore ways to use generative AI to improve your own cybersecurity operations.
Where to Start
As with any emerging technology, a strong grounding in the foundations of that technology is critical to helping you understand the associated scopes, risks, security, and compliance requirements. To learn more about the foundations of generative AI, I recommend starting by reading more about what generative AI is, its unique terminologies and nuances, and exploring examples of how organizations are using it to innovate for their customers.
If you’re just starting to explore or adopt generative AI, you might imagine that an entirely new security discipline will be required. While there are unique security considerations, the good news is that generative AI workloads are, at their core, another data-driven computing workload, and they inherit much of the same security regimen. If you’ve invested in cloud cybersecurity best practices over the years and embraced prescriptive advice from sources like top security frameworks and best practices, you’re well on your way!
Core security disciplines like identity and access management, data protection, privacy and compliance, application security, and threat modeling are still critically important for generative AI workloads, just as they are for any other workload. For example, if your generative AI application is accessing a database, you’ll need to know what the data classification of the database is, how to protect that data, how to monitor for threats, and how to manage access. But beyond emphasizing long-standing security practices, it’s crucial to understand the unique risks and additional security considerations that generative AI workloads bring. This post highlights several security factors, both new and familiar, for you to consider.
Determine Your Scope
Your organization has decided to move forward with a generative AI solution; now what do you do as a security leader or practitioner? As with any security effort, you must understand the scope of what you’re tasked with securing. Depending on your use case, you might choose a managed service where the service provider takes more responsibility for the management of the service and model, or you might choose to build your own service and model.
Let’s look at how you might use various generative AI solutions in a generic cloud environment. Security is a top priority, and providing customers with the right tool for the job is critical. For example, you can use serverless, API-driven services with simple-to-consume, pre-trained foundation models (FMs) provided by various vendors. Managed AI services provide you with additional flexibility while still using pre-trained FMs, helping you to accelerate your AI journey securely. You can also build and train your own models using cloud-based machine learning platforms. Maybe you plan to use a consumer generative AI application through a web interface or API such as a chatbot or generative AI features embedded into a commercial enterprise application your organization has procured. Each of these service offerings has different infrastructure, software, access, and data models and, as such, will result in different security considerations. To establish consistency, I’ve grouped these service offerings into logical categorizations, which I’ve named scopes.
In order to help simplify your security scoping efforts, I’ve created a matrix that conveniently summarizes key security disciplines that you should consider, depending on which generative AI solution you select. This is called the Generative AI Security Scoping Matrix.
The first step is to determine which scope your use case fits into. The scopes are numbered 1–5, representing least ownership to greatest ownership.
Buying Generative AI:
Scope 1: Consumer app – Your business consumes a public third-party generative AI service, either at no-cost or paid. At this scope, you don’t own or see the training data or the model, and you cannot modify or augment it. You invoke APIs or directly use the application according to the terms of service of the provider.
Example: An employee interacts with a generative AI chat application to generate ideas for an upcoming marketing campaign.
Scope 2: Enterprise app – Your business uses a third-party enterprise application that has generative AI features embedded within, and a business relationship is established between your organization and the vendor.
Example: You use a third-party enterprise scheduling application that has a generative AI capability embedded within to help draft meeting agendas.
Building Generative AI:
Scope 3: Pre-trained models – Your business builds its own application using an existing third-party generative AI foundation model. You directly integrate it with your workload through an application programming interface (API).
Example: You build an application to create a customer support chatbot that uses a foundation model through cloud provider APIs.
Scope 4: Fine-tuned models – Your business refines an existing third-party generative AI foundation model by fine-tuning it with data specific to your business, generating a new, enhanced model that’s specialized to your workload.
Example: Using an API to access a foundation model, you build an application for your marketing teams that enables them to build marketing materials specific to your products and services.
Scope 5: Self-trained models – Your business builds and trains a generative AI model from scratch using data that you own or acquire. You own every aspect of the model.
Example: Your business wants to create a model trained exclusively on deep, industry-specific data to license to companies in that industry, creating a completely novel LLM.
Source: hackernoon.com
The post Mental Model for Generative AI Risk and Security Framework appeared first on HIPTHER Alerts.

Uncategorized

Prime Minister concludes successful visit from President of France to Canada

Published

20 hours ago

September 27, 2024

Wladimir P.

prime-minister-concludes-successful-visit-from-president-of-france-to-canada

The Prime Minister, Justin Trudeau, welcomed the President of France, Emmanuel Macron, to Canada from September 25 to 26, 2024. With stops in Ottawa, Ontario, and Montréal, Quebec, the visit helped further strengthen the close ties between our countries and advance our shared priorities.
The leaders announced three key declarations that will align Canada and France’s work to preserve peace and security, take ambitious climate action, protect the environment, and responsibly harness the full potential of artificial intelligence (AI).
The first of these three declarations, the Canada-France Declaration on a Stronger Defence and Security Partnership, underscores Canada and France’s steadfast commitment to supporting Ukraine in the face of Russia’s illegal invasion. It also reaffirms our contributions to regional stability and security in the Indo-Pacific and reflects our co-operation in managing emergencies, modernizing our armed forces, and combatting foreign interference.
The two leaders discussed shared, ongoing work to respond to the humanitarian situation in Haiti and reiterated their support for the United Nations-authorized Multinational Security Support mission in the country. Canada and France are in steadfast support of Haitian-led solutions to the conflict that will make a meaningful and lasting difference in the lives of the Haitian people – and build a better future.
Building on the progress made at the United Nations General Assembly and the Summit of the Future earlier this week, Prime Minister Trudeau and President Macron highlighted the critical importance of continued action to fight climate change and protect our oceans. In the Canada-France Declaration on the Ocean, the leaders underlined the vital role that oceans play for the environment, the climate, the economy, and food and energy security throughout the world. To advance our work, Prime Minister Trudeau announced Canada’s membership in the Paris Pact for People and the Planet. The Pact, led by France and in partnership with global leaders, emphasizes collective action to accelerate sustainable development and create opportunities to help lift vulnerable populations out of poverty.
During the visit, the Prime Minister and the President met with AI experts, entrepreneurs, and industry leaders to discuss the risks and benefits of this new technology. Canada and France have world-leading AI ecosystems, including leadership roles in the Global Partnership on Artificial Intelligence (GPAI), which has 29 members worldwide. A testament to our progress in growing a dynamic AI industry, GPAI’s first two centres of expertise opened in Canada and France. Moving forward on this work, the Prime Minister and the President announced the Canada-France Declaration on Artificial Intelligence. The Declaration reiterates our countries’ commitment to a safe use of AI that respects human rights and democratic values.
During President Macron’s visit, Canada was also named Country of the Year for the Viva Technology 2025 technology conference, which will be held in Paris next year. At this event, Canada’s delegation will collaborate with the international community and meet with thousands of visionary start-ups, investors, organizations, and researchers to leverage advances in AI to strengthen our economy, increase productivity, and create new opportunities for Canadians. SCALE AI, Canada’s Global Innovation Cluster dedicated to AI, will lead Canada’s business delegation.
Prime Minister Trudeau and President Macron reaffirmed their commitment to promoting the French language and La Francophonie’s institutions ahead of the next Sommet de la Francophonie, which will be held in Villers-Cotterêts and Paris, France, on October 4 and 5, 2024. They also renewed their commitment to strengthening strategic coordination in preparation for the successive G7 Presidencies that Canada and France will hold, in 2025 and 2026 respectively.
Quote“Canada and France’s relationship is built on shared history, a common language, and democratic values. President Macron’s visit to Canada is a testament to the enduring friendship between our two countries, and with the progress we have made over this visit, we will move forward to build a fairer and more prosperous future for our peoples.”— The Rt. Hon. Justin Trudeau, Prime Minister of Canada
Quick Facts

This was President Macron’s second visit to Canada. It followed both leaders’ participation in the United Nations General Assembly and Summit of the Future in New York City, United States of America.
As a permanent member of the United Nations Security Council, the North Atlantic Treaty Organization (NATO), the G7 and the G20, a founding member of the European Union, and a key partner in the Organisation internationale de la Francophonie, France is a key ally for Canada on the international stage.
In 2023, France was Canada’s third largest merchandise export market in the European Union, and its 12th largest trade partner globally, with two-way merchandise trade totalling $12.9 billion.
That same year, Canadian exports to France amounted to $4.3 billion, while imports from France totalled $8.7 billion.
In France, Canada is represented by an embassy in Paris and consulates in Lyon, Nice, and Toulouse. France is represented in Canada by its embassy in Ottawa and consulates in Vancouver, Toronto, Montréal, Québec, and Moncton.

Uncategorized

Relativity Spotlights Legal Industry Leaders at the 2024 Innovation Awards

Published

20 hours ago

September 27, 2024

Wladimir P.

relativity-spotlights-legal-industry-leaders-at-the-2024-innovation-awards

Relativity, a global legal technology company, today announced the winners of this year’s Innovation Awards at Relativity Fest. The Innovation Awards celebrate the trailblazing individuals and teams building custom solutions, empowering their peers and forging new paths to improve the legal industry and its communities.
“Another year of the Innovation Awards signals another opportunity to celebrate our community’s dedication to making a positive impact– whether that be through developing new solutions, providing excellent customer service, or elevating and advocating for their peers in the legal industry,” said Laurie Usewicz, Chief Partner Officer at Relativity. “This year’s winners exemplify the impassioned and innovative spirit that makes the future of our industry a bright one.”
The winners hail from, or work directly with law firms, financial institutions and consultant management companies large and small, private and public. Through a combined process of a judging committee and a community vote, Best Innovation winners are selected based on how they’ve leveraged the Relativity application programming interfaces in creative ways to solve Relativity’s customers’ most unique challenges.
In addition to the standard six individual and two Best Innovation awards, a new Best Innovation category was added for this year, Developer Partner. This award recognizes solutions created by Relativity’s independent software vendor (ISV) community that are offered directly to customers. Eligibility is restricted to solutions that are not owned by an Enterprise or Solution, Advisor, or Provider Partner.
The 2024 Innovation Awards winners are:

Artificial Intelligence: Ben Sexton, Vice President, JND eDiscovery
Customer Experience: Jenna Rooney, Director, Client Services, Arete Incident Response
Education & Mentorship: Deedra Smith, Managing Director, FTI Consulting
Inclusion: Vazantha Meyers, Vice President, Discovery Services, Haystack ID
Security: Jenna Rooney, Director, Client Services, Arete Incident Response
Stellar Women: Stephanie L. Goutos, Lead Practice Innovation Attorney, Gunderson Dettmer
Best Innovation: Developer Partner: Redaction Suggestions in Blackout by Milyli
Best Innovation: Enterprise: Flywheel by Troutman Pepper eMerge
Best Innovation: Partner: GenAI Toolbox by EY Switzerland

Each of the award winners above exemplify what it means to be a changemaker at the individual, organizational and industry levels. All award winners are determined by a combination of Relativity judging committees unique to each category and a community vote.
Relativity congratulates all submissions for the innovative work delivered this past year.
The post Relativity Spotlights Legal Industry Leaders at the 2024 Innovation Awards appeared first on HIPTHER Alerts.

Uncategorized

MC Digital Realty wins Frost & Sullivan’s 2024 Japan Data Center Services Company of the Year Award

Published

20 hours ago

September 27, 2024

Wladimir P.

mc-digital-realty-wins-frost-&-sullivan’s-2024-japan-data-center-services-company-of-the-year-award

Digital Realty (NYSE: DLR), the largest global provider of cloud- and carrier-neutral data center, colocation, and interconnection solutions, today announced that MC Digital Realty: A Mitsubishi Corporation and Digital Realty Company, has been awarded Frost & Sullivan’s 2024 Company of the Year award for Japan’s data center services industry.
MC Digital Realty is at the forefront of the market, delivering advanced technologies and strategic investments that provide Japanese businesses with secure, innovative, and sustainable infrastructure that enables artificial intelligence (AI) innovation.
MC Digital Realty’s state-of-the-art data centers are optimized for AI, offer the necessary flexibility and scalability for intensive model training and real-time inferencing, and provide advanced liquid cooling systems that ensure optimal performance for demanding AI tasks. Demonstrating its commitment to sustainability, MC Digital Realty leverages its relationship with Mitsubishi Corporation to prioritize energy efficiency, matching electricity usage in its colocation data halls with 100% renewable energy to minimize its carbon footprint.
Frost & Sullivan also recognized MC Digital Realty’s operational excellence. The company’s robust network of resilient data centers is strategically located in low-seismic regions and employs cutting-edge seismic isolation technology to protect its infrastructure, ensuring uninterrupted service and maximum reliability.
MC Digital Realty’s data centers also leverage the power of PlatformDIGITAL®, Digital Realty’s global data center platform. It provides customers access to a vast ecosystem of over 1,100 cloud and IT services, as well as 1,200 network services across 300+ data centers in 50+ metros worldwide.
“The company demonstrates a strong focus on the Japanese market through its continued investments. Strategic partnerships and innovations aligning with transforming customer expectations enable the service provider to achieve success in the country,” said Nishchal Khorana, Global Vice President of ICT at Frost & Sullivan.
Serene Nah, Digital Realty’s Managing Director and Head of Asia Pacific, said: “We are honored to receive the award and recognition from Frost & Sullivan, which validates MC Digital Realty’s commitment to serving partners and customers as they accelerate their AI innovation journeys in Japan. As AI continues to shape the future, Digital Realty remains committed to optimizing data center infrastructure for peak workload performance, and to meet the highest standards of innovation, while ensuring sustainability, security, and resilience.”
The post MC Digital Realty wins Frost & Sullivan’s 2024 Japan Data Center Services Company of the Year Award appeared first on HIPTHER Alerts.