It was, as always, a pleasure to visit Purdue on November 11th, meet with students and faculty, give a talk, and spend some time with spaf. Spaf was already a security OG when I attended my very first computer security workshop at NIST in 1995. I was working on a newly-minted DARPA grant for Reliable Software Technologies (RST). Eventually, that work was published at Oakland and became part of the Software Fault Injection book, and RST was renamed as Cigital.

Spaf has always been a beacon of truth telling in a field chock full of huckers and bullshitters. And, somehow (though truly a curmudgeon before his time) spaf has remained a security optimist with a forward-looking perspective. I would like to think my career emulates that in some way.

Here’s the talk—No Security Meter for AI—delivered on a very thunderstormy afternoon to a mostly-virtual zoom audience.

Read the BIML paper behind this work here.