Dell将供应链安全与代理AI的挑战联系起来
随着企业将AI带入核心业务，供应链安全正变得日益重要。 这些部署带来了风险，要求安保小组审查如何保护基础设施、数据和自主系统。
随着AI agents获得自己行动的能力，高管们需要重新思考风险存在的地方和谁控制它。 Dell Technologies Inc.将AI工厂安全作为对话的核心内容，据位于Dell的Dell AI工厂解决方案产品管理主任Kamlesh Shah(图片，右侧)称。
“随着AI系统不断增长的速度和规模，企业需要准备好能够以[那速度和规模实际行动，” 也并非一夜之间发生。
Dell Services(Dell)产品管理总监Shah和Ash Lakshmanan(左翼)在CUBE, SiliconANGLE Media的活流工作室独家播出时，与CUBE Research的 Dave Vellante 为AI网络安全和复原力峰会演讲。 他们讨论了企业如何获得代理AI以及遗留工具为何忽略了agent的身份。 (* 以下披露。 )
供应链安全锁定一个层次化的AI防御
戴尔推荐的许多控制器为安全小组所熟悉。 据Shah说，戴尔的做法始于供应链安全，在产品被设想之前对供应商进行审查，并将保护范围扩大到部署的整个生命周期。 他指出，Dell通过Dell AI工厂提供这些能力，同时在自己的内部信息技术业务中运行这些能力。
" 戴尔作为提供商和非常大规模AI用户在AI基础设施方面的经验创造了一个客户可以查看和replicate,"他称。 “目标是将这些部署经验变成可重复的模式。.....而不是重新确立控制。”
Agents更改了威胁模型，因为他们所做的不只是回答问题。 鉴于一个目标，agent可以采取多步骤，找到并使用工具，调用记录系统并与其他agents通信，这使得其行为更不可预测，Shah解释道。 这就把边界放在中心位置：政策执行检查、运行时间沙箱和遥测记录谁授权什么。
agent本身应该具有与特定工作量相联系的能力和身份，而不是对所有申请工作的广泛许可。 “agent需要操作的层是真正授权的，范围狭窄的许可。 以时间为基础。”
一旦客户选择了一个架构，Dell Services帮助他们将一个有前途的用例转变为一个他们可以操作，治理并依托的环境，根据拉克什马南的说法。 这项工作涵盖跨越硬件、运行时间、数据和应用的四层堆栈的安全。 他指出，最经常被低估的作品客户在所有四层都具有可观察性。
“你的旧工具不能看AI的工作量。 你的旧工具可以观察人类身份，也可能是机器身份
有些客户在Dell的渗透测试服务中，对付他们计划释放的聊天机器人，Dell还和Nvidia Corp.合作，将办公桌边的代理AI带入数据中心。
“我们需要新的工具、平台和技能来解决这个问题，” “但安全的基本因素并没有消失，这就是我们谈到的分层安全办法。 你还需要缩小攻击范围你仍然需要24/7的持续观察能力，你需要准备，仿佛可能发生突破。”
SiliconANGLE和CUBE对AI网络安全和复原力峰会的报道：
(* 披露：Dell Technologies Inc.赞助了CUBE的这一部分。) Dell和其他赞助商对CUBE或SiliconANGLE上的内容都没有编辑控制。 )
照片：SiliconANGLE
SiliconANGLE联合创始人John Furrier的留言：
支持我们的使命，通过与CUBE社区接触，保持内容的开放和自由。 加入CUBE的校友信托网络，其中技术领导者相互连接，分享情报并创造机会。
- 15M+观看CUBE视频，为跨越AI、云、网络安全等的对话提供动力
- 11.4k+CUBE校友——通过一个独特的信任网络，与11,400多位技术和企业领袖建立联系，塑造未来
你是AWS客户吗？在财务上支持SiliconANGLE，从我们的市场门户页面和链接购买您的AWS服务：https://siliconangle.com/aws-marketplace/
关于 SiliconANGLE 媒体
SiliconANGLE Media由技术视觉家John Furrier和Dave Vellante所创立，构建了产业领先数字媒体品牌的动态生态系统，达到了1500+百万精英技术专业人士。 我们的新专有CUBE AI Video Cloud正在观众互动中突破地步
本文由 AI宝库自动抓取并翻译，版权归原作者所有；如需查看原文请点下方链接。
Dell links supply chain security to the challenges of agentic AI
Supply chain security is taking on new importance as enterprises bring AI into core business operations. Those deployments introduce risks that require security teams to examine how infrastructure, data and autonomous systems are protected.
As AI agents gain the ability to act on their own, executives need to rethink where risk lives and who controls it. Dell Technologies Inc. has made AI factory security a central part of that conversation, according to Kamlesh Shah (pictured, right), director of product management, Dell AI Factory Solutions, at Dell.
“With the speed and scale at which the AI systems are growing, the enterprise needs to be ready to be able to actually act at [that] speed and scale,” he said. “And it doesn’t happen overnight.”
Shah and Ash Lakshmanan (left), director of product management, Dell Services, at Dell, spoke with theCUBE Research’s Dave Vellante for the AI Cybersecurity and Resilience Summit, during an exclusive broadcast on theCUBE, SiliconANGLE Media’s livestreaming studio. They discussed how enterprises can secure agentic AI and why legacy tools miss agent identities. (* Disclosure below.)
Supply chain security anchors a layered AI defense
Many of the controls Dell recommends are familiar to security teams. Dell’s approach begins with supply chain security, vetting suppliers before a product is even envisioned and extending protection across the full life cycle of a deployment, according to Shah. Dell has offered those capabilities through the Dell AI Factory while also running them in its own internal IT operations, he noted.
“Dell’s experience in the AI infrastructure as a provider and a very large-scale AI user has created a model that the customers can look at and replicate,” he said. “The goal is to turn these deployment lessons into repeatable patterns … rather than reinvent the control.”
Agents change the threat model because they do more than answer questions. Given a goal, an agent can take multiple steps, find and use tools, call systems of record and communicate with other agents, which makes its behavior less predictable, Shah explained. That puts boundaries at the center: policy enforcement checks, runtime sandboxing and telemetry that records who authorized what.
“The agent itself should have the ability and identity that’s tied to a particular workload, not a broad-based permission to work on all applications,” he said. “The layer at which the agent needs to operate is really delegated, narrowly scoped permissions. Time-based.”
Once customers choose an architecture, Dell Services helps them turn a promising use case into an environment they can operate, govern and iterate on, according to Lakshmanan. That work covers security across a four-layer stack spanning hardware, runtime, data and applications. The piece customers most often underestimate is observability across all four layers, he noted.
“Your old tools just cannot look at AI workloads. Your old tools that could look at human identities and possibly machine identities cannot look at agent identities,” he said.
Some customers that ran Dell’s penetration testing services against chatbots they planned to release learned the bots weren’t ready and could have been exploited by a hacker, Lakshmanan noted. Dell is also working with Nvidia Corp. to bring agentic AI from the deskside to the data center.
“We need new tools, platforms and skills to tackle this,” he said. “But the foundational elements of security have not gone away, which is the layered security approach we talked about. You still need to narrow your attack surface. You still need 24/7 continuous observability, and you need to be prepared as if a breach could happen.”
Here’s the complete video interview, part of SiliconANGLE’s and theCUBE’s coverage of the AI Cybersecurity and Resilience Summit:
(* Disclosure: Dell Technologies Inc. sponsored this segment of theCUBE. Neither Dell nor other sponsors have editorial control over content on theCUBE or SiliconANGLE.)
Photo: SiliconANGLE
A message from John Furrier, co-founder of SiliconANGLE:
Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.
- 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
- 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network
Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: https://siliconangle.com/aws-marketplace/
About SiliconANGLE Media
Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.
Auto-fetched and translated by AI Gem Box. All rights belong to the original author.