Paul's Security WeeklySubscribe
Supply chain, AI/ML, AI benefits/risks

Building AI BOMs – Helen Oakley – PSW #841

Larry and Helen walk us through the AI supply chain landscape. Learn what goes into building and using AI models and the dangers that could lurk within.

Segment Resources:

Full episode and show notes

Guest

Director of Secure Software Supply Chain & Secure Development at SAP

Helen Oakley, CISSP, GPCS, GSTRT, is a leading figure in technology and cybersecurity, serving as Director of Secure Software Supply Chain and Secure Development at SAP’s Global Security and Cloud Compliance. She drives security-by-design principles across SAP’s engineering teams and leads AI software supply chain security efforts, including the development of the AI Bill of Materials (AIBOM) and co-leading the CISA SBOM Tiger Team for AIBOM. Recognized among the Top 20 Canadian Women in Cybersecurity, Helen co-founded LeadingCyberLadies.com, a network empowering women in cybersecurity, advises tech startups, and speaks frequently at industry events.

Hosts

Principal Security Researcher at Eclypsium
Founding Partner at TRIFIDENT
Sr. InfoSec Consultant at Online Business Sytems
Executive Director at Guardedrisk
Product Security Research and Analysis Director at Finite State

Related

AI fixes everything, C++ the actual worst, IAM is hard – ASW #308

This week, in the Application Security News, we dismiss magical thinking and discuss what generative AI will actually be able to do for us. We also discuss whether Secure by Design's goals are practical or not. OSC&R releases a report on software supply chain that should be interesting, though neither of us had time to read it yet. Also, Wat...
Exploding Pagers – PSW #843

Apple drops a lawsuit to avoid exposing secrets, what does it mean for the security industry if MS locks down the kernel?, exploding pagers, more things from the past: Adobe Flash exploits, robots get rid of your data, PKFail is still a thing, Android TV malware is back: now with conspiracy theories, DMA attacks, gamers are not nation-state attacke...
Wifi Vulns, Yubikeys, and Firmware – PSW #842

Don't tell the FCC there is a new Flipper firmware release, unpatchable?, argv[0] and sneaking past defenses, protect your registries, someone solved my UART RX problem, PKFail update, legal threats against security researchers documented, EDR bypass whack-a-mole continues, emulating PIs, VScode moonlights as a spy, Want to clone a YubiKey? All you...