SEC536: Adversarial AI - Penetration Testing AI Systems


Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsConfront emerging threats, secure your environment, and strengthen cyber resilience with SANS
Equip yourself or your team with comprehensive hands-on cybersecurity training. Explore 85+ courses covering technical skills, leadership, and real-world defense against evolving cyber threats.







Heather Barnhart has spent more than 20 years investigating what happened after a digital incident. As a SANS digital forensics expert, she knows how much can hinge on a conversation at home before anything goes wrong. This October, she’s helping families prepare for AI scams with the Secure the Family Protocol: four practical steps, one to take each week.

SANS AI Cybersecurity Summit Fall 2026
Nov. 2-3 | Arlington, VA & Live Online
The SANS AI Cybersecurity Summit Fall 2026 brings together practitioners building, securing, evaluating, and governing AI to share what they're learning now.
Explore what's working, where the hard problems remain, and how teams are tackling AI governance, agentic systems, security controls, and emerging threats through technical talks, real-world case studies, and hands-on workshops.

An organization’s overall AI security maturity can’t rise more than one stage above its Govern score, so a weak governance foundation quietly caps everything else, no matter how much work has gone into Protect or Utilize. The new Govern Field Guide gives you the five specific moves that raise a Stage 2 program to a defensible Stage 3.

Close critical team skill-gaps across all cyber disciplines in one building at Cyber Defense Initiative 2026 (Dec 14-19, Washington D.C. and online)
Can't Miss Keynote: Our CEO, James Lyne sits down with Brett Leatherman, Assistant Director, FBI Cyber Division, to discuss the FBI’s evolving cyber mission.
Included with any CDI course: 120 days of OnDemand access plus a GIAC exam attempt. Worth up to $2,000. Register by Nov 15.

Whether you're getting started or advancing your skills, choose from world-class training, industry-recognized certifications, or explore with free course demos. Start building your path with SANS.
Learn your way, whether in person, live instruction delivered in an online format, or self-paced, on your own schedule, with cybersecurity courses from top industry experts.
Master the skills to earn GIAC certifications, the industry's most rigorous credentials, with expert exam preparation from SANS.
Preview 70+ SANS courses, assess course difficulty, watch expert instructors, and experience the SANS OnDemand training platform firsthand.
The real value of this training lies at the intersection of quality content and delivery by a subject-matter expert actively working in the field, making it incredibly relevant and immediately applicable to my job.
You cannot beat the quality of SANS classes and instructors. I came back to work and was able to implement my skills learned in class on day one. Invaluable.
SANS is the best information security training you’ll find anywhere. World-class instructors, hands-on instruction, actionable information you can really use, and NetWars.
Effective cybersecurity operations rely on layers of offensive testing, defensive architecture and monitoring, forensics and incident response, cloud security, and leadership. Advancing your capabilities in these focus areas is our mission because it furthers your ability to protect us all.
Artificial Intelligence (AI) Cyber Security Training and Resources Ensure professionals at every level are prepared to navigate the complexities of an AI-driven future, equipping them with critical understanding of AI-powered threats and the skills to leverage AI to enhance security operations.
Learn moreTraining in penetration testing, red teaming, purple teaming, and exploit development, provides the skills needed to simulate real-world attacks, evade defenses, and enhance security through adversary emulation and improving defense strategies.
Learn moreEffective Cyber Defense enables organizations to anticipate, withstand, and recover from cyber-attacks through proactive monitoring, threat detection, and incident response. It combines security operations, automation, and resilient architecture to reduce risk and minimize attack impact.
Learn moreSANS Institute and OWASP AI Exchange present 8 Critical AI Security Controls for leaders governing AI adoption.

.png?width=1200&quality=75&format=webp)


Governments around the world rely on SANS for best-in-class training, equipping local and international cybersecurity teams with the skills necessary to protect critical infrastructure and stay ahead of adversaries

Cybersecurity professionals of all skill levels train with SANS to learn from industry experts and gain hands-on, practical knowledge that can be applied immediately, effectively preparing them for real-world threats.

SANS Institute is GIAC’s preferred partner for exam preparation, offering focused curriculums that help individuals pass with confidence and validate their expertise in various cybersecurity domains.

Fortune 500 companies partner with SANS to recruit, build, and retain high-performing, outcome-driven teams through industry-leading training solutions that bolster cyber resilience.
Equip your team with cutting-edge cybersecurity skills, designed to address your organization’s most critical security needs.
Empower your leaders with strategies that drive better decision-making, stronger risk management, and improved cyber resilience.
Mitigate human risk and ensure compliance with advanced training that addresses evolving threats and security regulations.
Adapt to new SEC mandates with a 10-module training course designed to expand cyber literacy and help leaders facilitate an engaged, united cybersecurity culture.

Join the SANS Cyber Leaders Network, exclusively for senior security executives. Connect with experts and thought leaders, share ideas and lessons learned and help drive industry breakthroughs.

Gain exclusive access to free resources, tools, and expert content—news, training, podcasts, whitepapers, and more. Explore unique member benefits designed for cybersecurity professionals that you won’t find anywhere else.

When you join the SANS community, you gain access to free cybersecurity resources, including free training, 150+ instructor-developed tools, the latest industry updates, and more.
In this webinar, we’ll explore how AI is changing phishing and social engineering, from convincing emails and messages to cloned voices, synthetic identities and deepfakes.

The 2026 SANS Cloud Security Research Survey brings together insights from security leaders and practitioners worldwide. This year’s study examines the current state of cloud security, highlighting key challenges, top threats, and the tools organizations are using—or wish they had—to secure cloud environments at scale. Join us for this exclusive webcast to explore the survey findings, gain practical insights, and benchmark your organization’s approach to cloud security.

Get ready for Cyber Quest CTF, Powered by RBC. Join the orientation webinar to learn how to access the platform, prepare your setup, navigate the competition, and get answers before the 72-hour challenge begins.

AI is changing what cybersecurity teams need from every role. This session shows leaders, HR teams, and practitioners how to adapt hiring, training, and workforce strategy to build resilient, AI-ready security teams.

This session reframes agent adoption as a hiring decision. It covers what to document before an agent touches production, how to audit and red team what it actually does, how to evaluate performance against something more useful than vibes, and why an offboarding plan matters as much as the onboarding one.

What should critical infrastructure leaders prioritize when communications degrade and outside support is delayed? This executive roundtable explores sustaining operations and preparing for a prolonged nation-state campaign.

This talk will take us on a trip down memory lane to cover the past, present, and future of offensive security and exposure management.

視覚化(Visualization)は、他者への伝達手段だけでなく、自分自身の理解の手段としても有用です。ただし、的確な図の作成のためには、試行錯誤や微調整が必要となることが少なくありません。Agentic AIは多くの作業を肩代わりしてくれますが、図を画像として直接生成させてしまうと、後からの修正やデータの差し替え、手順の再現が難しくなります。

Attackers have worked out that stealing an identity is cheaper than breaking a control and that deepfakes can be used to approve payments. This session puts a name to what is happening across the continent right now and shows practitioners what the attack surface looks like today.

Leadership decides whether a cyber programme succeeds or stalls. Your position on the org chart has nothing to do with whether you are the leader.

Artificial intelligence is transforming how security teams detect threats, automate response, and make critical decisions—but effective adoption requires more than just powerful tools. This Solutions Track session explores real-world approaches to applying AI in cybersecurity programs, focusing on how to move from theory to measurable impact.

Poorly designed C2 infrastructure can expose a Red Team operation. Join David Mayer to compare redirector strategies, learn how to configure them, and build more resilient infrastructure that better protects backend systems.

Crowley has published the SOC Survey for a decade. This session will start with high level findings, then deep dive into Jupyterlab python minutae as he discusses the analysis he performed to attempt to extract interesting correlations.

AI can speed malware analysis, but only with expert guidance. Learn how to direct, isolate, and verify an AI agent using REMnux MCP, and leave with a repeatable pattern for safer, more reliable AI-assisted analysis.

This session provides a practical, business-aligned introduction to Post-Quantum Cryptography (PQC) for security and risk leaders.

AI is definitely the word of the last year, but it feels this field evolves so rapidly that news from yesterday already feels like old.

AI agents are moving from the whiteboard to the SOC floor — and security teams are figuring out the rules as they go. In this webcast, SANS instructor Dave Shackleford and a Palo Alto Networks expert share fresh survey data from practitioners navigating the shift from static automation to autonomous AI operations. What threats are keeping defenders up at night?

This talk breaks down why actors manipulate information, the incentives that drive them, and the tactics they use to distort perception at scale. More importantly, it highlights the awareness and analytical discipline investigators need to recognize these influence efforts before they shape conclusions, contaminate evidence, or derail an inquiry.

Most "AI security" tools just summarize what already happened. This one tries to predict what happens next. On November 9, 2026, SANS instructor Matt Bromiley and Broadcom's Paul Miller take the stage for a Security Lab built around a simple but pointed question: can predictive AI actually get ahead of an attacker, or is it just another layer of noise on top of historical data?

Join us to discuss insights from SANS 9th annual State of ICS/OT Security Survey. This trusted industry research captures how organizations across sectors are evolving their industrial cybersecurity strategies in response to regulatory pressures, emerging threats, and operational demands.
