Have a listen to Google’s cloud security podcast EP150 Taming the AI Beast: Threat Modeling for Modern AI Systems with Gary McGraw, the episode is tight, fast, and filled with good information.

• Gary, you’ve been doing software security for many decades, so tell us: are we really behind on securing ML and AI systems? 
• If not SBOM for data or “DBOM”, then what? Can data supply chain tools or just better data governance practices help?
• How would you threat model a system with ML in it or a new ML system you are building? 
• What are the key differences and similarities between securing AI and securing a traditional, complex enterprise system?
• What are the key differences between securing the AI you built and AI you buy or subscribe to?
• Which security tools and frameworks will solve all of these problems for us?