Posts

Adoption of AI

 Adoption of AI Advice: 1) Not trust AI 100% to do everything 2) LLM not run workflow 3) Sandbox it 4) Log everything 5) Least privilege 6) Start slow with using AI 7) AI sucks at math 8) Time stamp tool 9) Shell mcp 10) Galileo AI to add guardrails

AI in Computer Security

 AI in Computer Security Well written reports about new AI tests in computer security: https://www.cybergym.io/

AI Environment

AI Environment   I was asked how to create an environment for AI that would I do for a business firm that is not a software firm. Thought it was a great question faced by many people.  This blog entry is an attempt to answer that question: Option 1 1) Get and Install  Docker    Download Docker.    A different option from a Docker container is an Edera container. ( https://edera.dev/ )  2) Create Docker Container ( Sandbox ) with Config file    The safest and easiest way to isolate your AI is running Ollama in a Docker container .     Why Docker?  Docker creates a strict security sandbox. The AI cannot see or touch the host computer's files unless you explicitly map a specific folder to it.  You can configure the Docker container with a restricted network bridge, preventing the AI from reaching the internet or sensitive company servers.      A suggested Docker config file is below.   ...

AI Security firms

 AI Security firms 1. Security for AI (Protecting Models and AI Agents) These companies focus specifically on testing models for vulnerabilities, stopping prompt injections, detecting data poisoning, and governing "Shadow AI".  Protect AI: Protect AI provides a comprehensive platform that secures AI/ML applications from model selection and testing to runtime. HiddenLayer: HiddenLayer offers runtime AI security to protect against adversarial attacks, model manipulation, and data leakage . Mindgard: Mindgard specializes in continuous security testing and autonomous red-teaming for AI systems. Zenity: Zenity is an AI agent-centric security and governance platform that monitors and restricts what AI agents are allowed to access and do.    2. AI-Powered Cybersecurity (Securing the Enterprise) These platforms utilize machine learning and AI for threat detection, behavioral analysis, and autonomous incident response. Wiz: Wiz acts as an AI and cloud security postu...