SEC536: Adversarial AI - Penetration Testing AI Systems



Over the past few years, the cyber threat landscape has been defined by supply chain compromises, the targeting of cloud and SaaS environments, and the growing use of AI by both defenders and adversaries. At the same time, state-backed and geopolitically motivated operations and an increasingly professionalized cybercrime ecosystem are further increasing complexity.
These developments reinforce that CTI serves a dual mission: enabling operational teams to detect, disrupt, and respond effectively, while also supporting executives and boards in making informed, risk-based decisions. The 2026 SANS CTI Survey explores how CTI programs are addressing this full spectrum of needs.
What You’ll Learn
This bonus session is only available to in-person and virtual attendees of this event. Links to the virtual presentations will be shared on the event slack channels in advance of the presentations.
In-Person & Virtual
This talk unpacks the academic principles of investigation, blending real-world insights with pop culture references and iconic film quotes. It tackles common mistakes amateur investigators make and challenges the notion that investigation is "just common sense." By exploring themes like Occam’s Razor and Hickam’s Dictum, it highlights the rigorous methodology required for professional investigations.
This bonus session is only available to in-person and virtual attendees of this event. Links to the virtual presentations will be shared on the event slack channels in advance of the presentations.
In-Person & Virtual
Registration:
About Core NetWars: The most comprehensive and AI-forward cyber range in the NetWars portfolio. Designed for practitioners across multiple disciplines, Core NetWars combines emerging AI security challenges with real-world cyber scenarios to strengthen the technical skills most needed for today's threats. It is the only range that qualifies for the annual Core NetWars Tournament of Champions!
Computer Requirements: Internet-based
Recommended For: All infosec practitioners of any level. It is recommended, but not required, that students have a basic or foundational knowledge of information technology and technical topics.
Disciplines: Cybersecurity 101, Cyber Defense, Penetration Testing, Digital Forensics, Incident Response, Cloud Computing, and AI.
Example Topics:
Interactive Scenario: SANS students are deployed to BLOCCORP, a global media giant built on toys, streaming, gaming, and AI. As strange activity spreads across its infrastructure, they uncover compromised systems, vulnerable AI models, rogue IoT devices, and reckless automation. Can they expose BLOCCORP’s hidden agenda and stop its AI-driven ambitions before the damage is done?
In-Person & Virtual
Registration:
About Core NetWars: The most comprehensive and AI-forward cyber range in the NetWars portfolio. Designed for practitioners across multiple disciplines, Core NetWars combines emerging AI security challenges with real-world cyber scenarios to strengthen the technical skills most needed for today's threats. It is the only range that qualifies for the annual Core NetWars Tournament of Champions!
Computer Requirements: Internet-based
Recommended For: All infosec practitioners of any level. It is recommended, but not required, that students have a basic or foundational knowledge of information technology and technical topics.
Disciplines: Cybersecurity 101, Cyber Defense, Penetration Testing, Digital Forensics, Incident Response, Cloud Computing, and AI.
Example Topics:
Interactive Scenario: SANS students are deployed to BLOCCORP, a global media giant built on toys, streaming, gaming, and AI. As strange activity spreads across its infrastructure, they uncover compromised systems, vulnerable AI models, rogue IoT devices, and reckless automation. Can they expose BLOCCORP’s hidden agenda and stop its AI-driven ambitions before the damage is done?
In-Person & Virtual