AI Apocalypse Prevention 101: Meet AIBOM, Your New Best Friend!

No ratings

Presented at SecTor 2024 by

In the rapidly evolving field of artificial intelligence (AI), understanding and managing AI components and their interdependencies is crucial. This talk introduces the concept of AI Bill of Materials (AIBOM), a comprehensive framework inspired by the Software Bill of Materials (SBOM), which aims to catalog the various elements within an AI system. By integrating AIBOMs with SBOMs, we can enhance transparency, traceability, and security in AI development and deployment.We will explore the current state of AIBOMs, examining their development, adoption, and existing challenges. Additionally, we will delve into the future potential of AIBOMs, highlighting areas where the community can contribute, such as identifying and mitigating vulnerabilities (CVEs, CWEs), and expanding the scope to include detailed training data definitions and configuration items.Through real-world case studies, including the misuse of an AI chatbot in an auto dealership, errors in vehicle quote generation and more, we will illustrate the importance of robust AIBOM practices. Finally, we will discuss how both blue and red teams can leverage AIBOMs to enhance security, demonstrating their dual-use potential for both offensive and defensive strategies.Join us to gain insights into the significance of AIBOMs, learn from practical examples, and discover how you can contribute to advancing this essential framework.