SEC536: Adversarial AI - Penetration Testing AI Systems


Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsEight of the ten threats in the OWASP Agentic Top 10 are fundamentally identity and authorization failures — not novel attacks, not zero-days. This reference card maps every threat to a concrete defensive control, grounded in Zero Trust architecture principles. Use it as a threat modeling checklist against your agentic environment, or as a starting point for assessing your current control coverage.
This content supports SEC530: Defensible Security Architecture and Engineering: Implementing Zero Trust for the Hybrid Enterprise.


Ismael is a Senior SANS Instructor and Arctic Wolf VP. Author of SEC530 and a prestigious GSE-certified expert, he blends decades of SOC, threat research, and community contributions to equip defenders with resilient, adversary-aware strategies.
Read more about Ismael Valenzuela

















