SEC536: Adversarial AI - Penetration Testing AI Systems


Walkthrough of either a published exploit chain, or something I've been working on recently. If everything lines up, it'll be a modem exploit.
In-Person
The classic way to make a massive difference with technology, or “Dent in The Universe,” is via a startup. We can define a startup as a company with high growth possibilities that is innovative and potentially disruptive.
This describes most startups in the infosec space. Also, essentially every startup has a strong technology component today and infosec concerns. This translates to lots of startup opportunities for infosec professionals, whether as a founder, early-stage employee, rank and file employee, or even investor.
In this talk we’ll discuss startups, including how important having a “great idea” may or may not be, funding options, as well as “exit” strategies. Funding options include bootstrapping, which means using existing resources, starting a business without external help or capital. Angel investors, affluent individuals who provide capital for a startup, are another option, as are venture capitalists, and crowd sourcing.
An exit strategy is how iliquid assets like company ownership and stock are changed into liquid assets like cash. Even if you do not plan on exiting the company, you may want to convert some assets to cash. And of course any investors will want their money back with profits at some point. If you are focused on outcomes instead of inputs, a startup can be absolutely fantastic. If you are happy hacking more than just technology, but also happy to figure out and execute business concerns, such as hacking procedures and whatever it takes to make things work, a startup is an option to consider.
In-Person
Registration:
About Core NetWars: The most comprehensive and AI-forward cyber range in the NetWars portfolio. Designed for practitioners across multiple disciplines, Core NetWars combines emerging AI security challenges with real-world cyber scenarios to strengthen the technical skills most needed for today's threats. It is the only range that qualifies for the annual Core NetWars Tournament of Champions!
Computer Requirements: Internet-based
Recommended For: All infosec practitioners of any level. It is recommended, but not required, that students have a basic or foundational knowledge of information technology and technical topics.
Disciplines: Cybersecurity 101, Cyber Defense, Penetration Testing, Digital Forensics, Incident Response, Cloud Computing, and AI.
Example Topics:
Interactive Scenario: SANS students are deployed to BLOCCORP, a global media giant built on toys, streaming, gaming, and AI. As strange activity spreads across its infrastructure, they uncover compromised systems, vulnerable AI models, rogue IoT devices, and reckless automation. Can they expose BLOCCORP’s hidden agenda and stop its AI-driven ambitions before the damage is done?
In-Person
Registration:
About Core NetWars: The most comprehensive and AI-forward cyber range in the NetWars portfolio. Designed for practitioners across multiple disciplines, Core NetWars combines emerging AI security challenges with real-world cyber scenarios to strengthen the technical skills most needed for today's threats. It is the only range that qualifies for the annual Core NetWars Tournament of Champions!
Computer Requirements: Internet-based
Recommended For: All infosec practitioners of any level. It is recommended, but not required, that students have a basic or foundational knowledge of information technology and technical topics.
Disciplines: Cybersecurity 101, Cyber Defense, Penetration Testing, Digital Forensics, Incident Response, Cloud Computing, and AI.
Example Topics:
Interactive Scenario: SANS students are deployed to BLOCCORP, a global media giant built on toys, streaming, gaming, and AI. As strange activity spreads across its infrastructure, they uncover compromised systems, vulnerable AI models, rogue IoT devices, and reckless automation. Can they expose BLOCCORP’s hidden agenda and stop its AI-driven ambitions before the damage is done?
In-Person