ArmorCode Inc.’s Post

Transcript

Hello everybody, welcome to this episode of Let's Talk ASPM and today I have the pleasure of hosting Deepali Bhoitte and we are starting a new series, a new series which focuses on AAA. Point of view capture, what does AAA mean? The AAA actually stands for 3A's. The first A stands for the exciting possibilities with AI in security. The second A stands for the concerning possibilities with AI. As you all know, it comes with it's a double with sword. And third one talks about the application security posture management and what's her point of view on this latest technology that's coming up here. So Deepali. Welcome, Deepali that we have here. She's a senior security leader. She's been a CISO at Anaplan and the security leader, senior security leader at the service now. So I'm really excited to share our perspective with you all here. Deepali, welcome. Thank you so much, Raj. Super excited to be here. You know, like, yeah, Deepali, appreciate you coming on the show here and sharing your AAA perspective. So starting with the 1st, a possibilities of AI and also the second one will be, if you can, if you want to blend them, the positive things that you're excited about, the possibilities with AI and security and also the concerning aspects of it. Yeah, absolutely. So happy to share my insights or point of view on these, right Raj? So as we all know, AI is not just a buzzword this year. We've we've actually seen organizations being more adaptive towards AI and also there is a lot of innovations happening in this space, right. So as a cyber security leader, I would definitely support right the the adoption of AI in any organization. Especially because of some of the advantages that it poses, right? It actually helps organizations in being more proactive towards certain areas of cyber security, such as threat detection and response, right? There are still organizations that are that are in the, in the transition period for, of becoming from more reactive towards more proactive. So I think AI would accelerate that journey for all for a lot of organizations. Right. I believe I can significantly reduce the time it would take to identify right a potential attack as well as have an action plan ready in place to mitigate them. It improves the accuracy by continuously analyzing data, right? Any security analyzed, they usually have a seven or eight hour shift, right? With AI you can leverage that there is somebody looking at the. At the threat vectors right 24 by 7 within the organization to detect the to study the data to identify the patterns right to detect anomalies that can potentially turn into a security incident or a security breach. So I'm really, I'm really supportive towards the adoption of AI, but as you can see that there are always two sides of the same coin, right? What AI? Also as a security leader, it does gives me certain concerns such as the complexity and the implementation challenge that any AI solution would pose in, right? So the security teams are already thinly stretched in most of the organizations. And then an additional investment of specialized infrastructure, specialized teams, right, to work on the adoption of AI technologies. It's going to be a challenge. At the same time there are as AI, it's more into the machine, machine learning that learning the patterns and how the anomalies are detected, there would be a false positives, right that leads to a high number of unnecessary alerts, right and causing alert. Critique within the organization and the security team. At the same time there will be false negatives right? That will AI might fail to detect certain subtle sophisticated attacks. So over reliance on AI as well would would go certain threats to be unnoticed. So those are the pros and cons of adapting us yet. Yeah, I mean, you're, you're right. I think it has its advantages, but at the same time, I think humans need to be in the loop, right, to make sure that what our reliance on AI is not absolute, but there's a human oversight on these things. So thanks so much on that. Now coming to the third A, which is application security posture management SPM. So what's your perspective on this latest technology? So when you talk about SPM, right, what a SPM involves typically is a continuously monitoring, accessing, assessing right and improving the security posture of different applications that the organization typically produces right and ships it to their customer. I believe what a I would really help in this area is by automatically scanning these applications for. Vulnerabilities which we see whether AI or not, a lot of applications are already doing that, right. But where the advantage of having AI in ASPM would be significantly reducing the time it would take to mitigate the specific vulnerability as well as the effort required by any security researcher or any any manual tester to kind of find what the root cause of that vulnerability will be. We might feel that AI eventually would would replace humans, right? That's that's usually the concern. But I strongly believe that when it comes to cybersecurity, right, AI can be used as a parallel means to improve the efficiency across the security organizations. But the need for having a talented cybersecurity to tool as well as cyber security personnel, right would always be there in this industry. Yeah, yeah, totally. Thank you so much. So it's very exciting that that three areas that we talked about the possibilities and the pitfalls of AI and then our SPM can be leveraged here. Deepali, thank you so much. I really appreciated my chat with you here. Look forward to more conversations later. Thank you so much, Raj.