We’re calling it now: Agentic AI will win RSAC buzzword Bingo

The security industry loves its buzzwords, and this is always on full display at the annual RSA Conference event in San Francisco. Don't believe us? Take a lap on the expo floor, and you'll be bombarded with enough acronyms and over-the-top claims to send you straight to the nearest bar, which will likely serve specialty …

[ecofeco]

Damn that is ballsy!

Plus, there are privacy and security concerns tied to the data used to train these models: Where is the data stored, and for how long? Who has access to it? Can it be deleted, and if so, by whom?

The data THEY stole from US?

I would suggest the safest place for them to store it would be to put it where the sun never shines. And then rotate.

[IGotOut]

I really want to go to one of these...

... conferences or talks and just go up to a speaker and say.

"I own a portable generator. If what you are saying turns out to be a lie, I'm going to hunt you down and attach the cables to your genitalia and fire it up. Now once again....what can it actually do?"

Something tells me the answer will be along the lines of "I don't actually know".

[amanfromMars 1]

Hmmmm? Is that new and really different from a old slick trick?

AI agents mean different things to different people. But broadly speaking, it's a task-oriented AI that sits on top of a LLM and can analyze data and take action, at least somewhat independently of a human.

These agents are designed to learn and improve over time, serving as intelligent assistants to security analysts rather than mere script executors.

So, an army of SpAds then to trail and trial new programs and products presented as an alternative to spam?

Yeah, that'll be a both a Great Game and Greater AI Game Changer. Bravo ....... and an absolute nightmare of a reality for current SCADA Operands and their Environments.

[Guy de Loimbard]

Re: Hmmmm? Is that new and really different from a old slick trick?

"These agents are designed to learn and improve over time, serving as intelligent assistants....."

At what cost?

Also, isn't that pretty much the definition of a human agent? Designed to learn and improve over time?

FFS.... Where else can you jam "AI" into to try and sell your vaporware?

[amanfromMars 1]

The Advanced Cyber Threat Lesson for Unparalleled Unprecedented Improved Learning

"These agents are designed to learn and improve over time, serving as intelligent assistants....."

At what cost?

Also, isn't that pretty much the definition of a human agent? Designed to learn and improve over time?

FFS.... Where else can you jam "AI" into to try and sell your vaporware? .... Guy de Loimbard

You might like to consider and accept that Wannabe Pioneering IT Knights and Alien Daemons have recognised the learn and improve over time element for both natural and supernatural progress is missing in humans with its place being occupied by the constantly recurring default cuckoo that is their own vapourware, proclaiming yet again via their cuckolded mainstream media agents after another pathetic internetworked failure, that such mistakes are unacceptable and lessons will be learned ........ and decided that AI will makeover and takeover remote command and virtual control of future events and horizons ....... for there is absolutely nothing you can do to prevent it no matter how much the thought may terrify you and you might think to dislike it and even imagine it possible to wage cyber war and fight effectively and successfully against it.

Things aint like they used to be whenever everything is fundamentally changed everywhere around you and for the changes to be either silently ignored or unbelievably denied as an ACTive Existential Threat/Treat and declared just an Imaginary Diabolical Liberty and Practical Physical Impossibility.

[Pascal Monett]

Just a minute there

"an agent can analyze an email and determine "this is a bad return address," Lord said. "This is a fake logo. This is a URL that's hosted in a .parks domain and has only been up for the last 12 hours. This is legitimately bad. Filter it to the security team"

I fail to see how you need pseudo-AI to get such results.

I programmed my own personal spam filter that could easily detect when someone claimed to represent (example) Microsoft(*) but the return address was somewhere.iranistan.com. I was capable of going through all http links and check if they were pointing to legitimate Microsoft domains. I had an extensive subject dictionary where I stored the blatant examples of things that spammers would use (mostly spelling errors and references to orders that needed to be confirmed and such). I also had a keyword database that looked through the mail checking for the most obvious things spammers put in their mails (I need someone to recover the money and send it to me, etc).

It was accurate, evolutive, and stored the offending spam in a reference database with the reason for its removal as keyword.

I'd have to go check the code, but I'm pretty sure I didn't write 10,000 lines to get this result, and there were no calls to any external libraries whatsoever.

This pseudo-AI thing is an industrial crusher looking for a walnut to justify its existence.

*Replace Microsoft by any company, bank or official organization

[Guy de Loimbard]

Re: Just a minute there

On the point and as eloquent as ever Pascal.

I fear we will keep seeing iterations of how "AI" is going to help us do something for a while.

At least until we all get so bored of the AI rhetoric and mantra, that neither you or I even bother to respond to these repetitive, but variation on a theme AI based nonsense representations that continually attempt to convince us this is the new world order!

[Mythical Ham-Lunch]

LLM-powered tools to detect intrusions into crappy software created by LLMs? If that sounds like a good idea, I've got an awesome rocket that I'd like to sell you. It just doesn't have quite enough fuel to get to Mars. We only need to make it a bit bigger, so it can carry more fuel!