BIML Participates in Calypso AI’s AccelerateAI2023

As the world is rapidly advancing technologically, it is vital to understand the implications and opportunities presented by Large Language Models (LLMs) in the realm of national security and beyond. This discussion will bring together leading experts from various disciplines to share insights on the risks, ethical considerations, and potential benefits of utilizing LLMs for intelligence, cybersecurity, and other applications.

https://accelerate.calypsoai.com/2023#Speakers

Panel on ML and Architectural Risk Analysis (aka Threat Modeling)

Irius Risk, a company specializing in automating threat modeling for software security, hosted a webinar on Machine Learning and Threat Modeling March 30, 2023. BIML CEO Gary McGraw participated in the webinar along with Adam Shostack.

The webinar was recorded and you can watch here. FWIW, we are still not exactly clear on Adam’s date of replacement.

BIML Keynotes National Science Foundation Meeting

Every bunch of years, the National Science Foundation holds vision workshops to discuss scientific progress in fields they support. This year BIML’s Gary McGraw was pleased to keynote the Computer Science “Secure and Trustworthy Cyberspace” meeting.

He gave a talk on what #MLsec can learn from #swsec with a focus on technology discover, development, and commercialization. There are many parallels between the two fields. Now is a great time to be working in machine learning security.

You can download the slides here.

AMA for Open Security Summit Zeros in on Machine Learning

BIML CEO Gary McGraw participates in an AMA

Lots of excellent content on ML Security, ML, and security in this video. Have a look.

Shostack on ML and Threat Modeling

Adam Shostack is one of the pre-eminent experts on threat modeling. So when he publishes an article, it is always worth reading and thinking about. But Adam seems to be either na├»ve or insanely optimistic when it comes to AI/ML progress. ML has no actual IDEA what it’s doing. Don’t ever forget that.

This issue is so important that we plan to debate it soon in a webinar format. Contact us for details.

Read adam’s article here.

ML and Automated Coding: Not Ready for Prime Time

As a software security guy, I am definitely in tune with the idea of automated coding. But today’s “code assistants” do not have any design-level understanding of code. Plus they copy (statistically-speaking, anyway) chunks of code full of bugs.

Robert Lemos wrote a very timely article on the matter. Check it out.

https://readme.security/ai-code-assistants-need-security-training-fb1b81acc85a

BIML in darkreading 2: a focus on training data

The second in a two part darkreading series focused on machine learning data exposure and data-related risk focuses attention on protecting training data without screwing it up. For the record, we believe that technical approaches like synthetic data creation and differential privacy definitely screw up your data, sometimes so much that the ML activity you wanted to accomplish is no longer feasible.

Read the article now.

The first article in the series can be found here. That article introduces the often-ignored problem of operational query data exposure.

Discussing MLsec at the Local Retirement Community

As part of our mission to spread the word about machine learning security far and wide, we were pleased to deliver a talk at Westmister-Canterbury in the Shenandoah Valley.

The talk posed a bit of a challenge since it was the very first “Thursday talk” delivered after COVID swept the planet. As you might imagine, seniors who are smart are very much wary of the pandemic. In the end, the live talk was delivered to around 12 people with an audience of about 90 on closed circuit TV. That, and the fact that these accomplished seniors came from all walks of life, made this an interesting iteration of the BIML talk.

Watch for yourself!

Let us know if your group would appreciate a talk from BIML.

Think Global, Talk Local

We’re pleased that BIML has helped spread the word about MLsec (that is, machine learning security engioneering) all over the world. We’ve given talks in Germany, Norway, England, and, of course, all over the United States.

And we’re always up for more. If you are interested in having BIML participate in your conference, please contact Gary McGraw through his website.

This summer, we were asked to give a talk at our local community center, the Barns of Rose Hill. We were happy to oblige. We even donated all proceeds to FISH.

Those of you who are deep geeks will know what a challenge it can be to communicate subtle technology ideas to normal people. BIML prides itself on being able to do that. The issues we’re researching are important and have a direct impact on our society as a whole. For that reason, spreading the word among non-technical normals is critical to our mission.