Securing AI at Scale: Why Your Logs Can't Read Agent Intent | Ashish Rajan
From Security Unfiltered · 00:42:55
Show by Joe South
Ashish Rajan is back on Security Unfiltered, a few years after we last recorded together at RSA. Ashish is a CISO, host of the Cloud Security Podcast and AI Security Podcast, and author of the new Wiley book AI Security Engineering.We get into how you write a book on a field that changes every month, why agents made him rewrite his plan halfway through, and what actually matters when you have millions of agents in your environment. Ashish makes the case that logs alone can't tell you intent ("is Joe an employee?" and "can I have Joe's password?" both look like plain text), why behavior is where agent security is heading, and why no vendor is going to build the internal context layer your security team needs. We also talk open weight models vs paying for tokens, whether the government had this tech first, and why human life still comes before technology.Chapters00:00 Ashish is back on Security Unfiltered02:40 Joe's dissertation: zero trust for satellites and post-quantum crypto06:36 Ashish's new book, AI Security Engineering07:07 Ashish's path: IAM, cloud security, Cloud Security Podcast08:26 From media company to AI advisory and the AI Security Lab10:19 Local compute, open weight models, Grok vs Claude13:35 Build harnesses you can swap out14:34 How do you write a book on a topic that changes every month?19:05 When research gets published faster than you can cite it20:54 Why network security is back in the conversation21:23 Agents breaking out of a sandbox22:57 Is the government already ahead on AI?23:54 The Manhattan Project comparison25:13 How cyber warfare teams test exploits26:41 Security for AI is a new field28:16 Human life over technology: Waymo and surgical robots29:58 Which agent security capabilities actually work?31:40 Make the agent explain why it pulled 10 records32:50 Behavior and intent over logs35:12 The internal context layer no vendor will build38:47 Logging is legacy at AI speed40:20 Horses vs cars: who gets left behind with AI42:17 Wrap upAshish Rajan on LinkedIn: https://www.linkedin.com/in/ashishrajan/AI Security Engineering (Wiley): https://www.amazon.com/dp/1394387687TechRiot: https://techriot.ioCloud Security Podcast: https://www.cloudsecuritypodcast.tvSubscribe: https://www.youtube.com/@securityunfilteredpodcastShow site: https://www.securityunfiltered.comX: @SecUnfPodcastAffiliates➡️ OffGrid Faraday Bags: https://offgrid.co/?ref=gabzvajh➡️ OffGrid Coupon Code: JOE➡️ Unplugged Phone: https://unplugged.com/Unplugged's UP Phone - The performance you expect, with the privacy you deserve. Meet the alternative. Use Code UNFILTERED at checkout*See terms and conditions at affiliated webpages. Offers are subject to change. These are affiliated/paid promotions.Tesla Referral Code: https://ts.la/joseph675128Follow the Podcast on Social Media!Instagram: https://www.instagram.com/secunfpodcast/Twitter: https://twitter.com/SecUnfPodcast
More episodes of Security Unfiltered
More episodes
- AI Agent Guardrails: OpenAI Sandbox Escape | Bill Gurling, Rubrik
- Prioritization Is Dead: Every CVE Has an Exploit Now | Shimon Tolts
- Open Models Will Do Anything: AI Is Speeding Up Attacks | Rob Chapman, ArmorCode
- AI Agents Are Deleting Production. Cloud Security Has to Catch Up | Matt Lea
- Joe Grand: The Hardware Hack That Can Never Be Patched
- Your AI Agents Will Try Every Permission You Gave Them | Nadav Cornberg Eve
- Why Antivirus Fails at File Scanning | OPSWAT CEO Benny Czarny on CDR
- 100,000 OAuth Grants Later, Security Teams Still Can’t See the Risk
- Breaking the Sky: How Vulnerable Are Our Satellites?
- The Future of AI: Security, Ethics, and Human Augmentation
PodSearch is a free, independent podcast search engine. Read about PodSearch, the privacy policy or contact us.