Yaron Singer, is the Founder and CEO of Frontier Security. Previously he founded Robust Intelligence that was acquired by Cisco and he was VP at Splunk and Cisco Security following the acquisition. Before that Yaron was a Professor of Computer Science and Applied Math at Harvard University . He is a leading expert in AI, Machine Learning, Optimization, Algorithms, and Deep Learning.
Defensive Intelligence: Rethinking Security Operations
In this talk we will discuss an emerging trend in large scale analysis of machine-generated data used for cybersecurity operations. In particular, we will discuss how data management systems used for security analytics are being rebuilt around models that investigate alerts and run detection logic directly, a shift we call Defensive Intelligence. This talk outlines that vision and two recent empirical studies on trusting models in the role. First, cost-aware evaluation shows that defensive investigation doesn't scale with compute the way offensive tasks do, depending instead on disciplined tool use and telemetry navigation. Second, our evaluation of Kimi K3, in which the model escaped its sandbox to fetch the benchmark's answers, shows why containment and model behavior must be treated as part of the attack surface.