Our Speakers
An Uncompromising Roster of Experts.
Our speakers bring unfiltered, tactical insights forged in the crucible of real-world incident response.
Jake Williams
Jake Williams (aka MalwareJake) is a seasoned security researcher with decades of experience in the technology and security industries. Jake is a former Startup Founder, former Senior SANS Instructor and Course Author, and an Intelligence Community and Military Veteran. Today, Jake is the VP of R&D at Hunter Strategy, an IANS Faculty Member, and an independent security consultant. Jake’s current research and consulting focus on the intersection of AI and machine learning with cybersecurity. He has twice won the DoD Cyber Crime Center (DC3) annual digital forensics challenge and is the recipient of the NSA Exceptional Civilian Service Award.
Sessions
Tue Feb 02, 1:00 PM - 5:00 PM
Hands-On AI Security Risk Assessment - Part 1This is part 2 of an 8 hour-course. Please also register for part 2.
With AI being embedded in practically every line of business application, security teams are struggling to keep pace with the rapidly moving landscape of AI.
This course trains students on the skills necessary to understand the foundations of AI from a security perspective, threat model applications using AI, identify appropriate AI use cases for security teams and line of business applications, critically evaluate the risk of each, and build out an AI governance program. Students will learn how to separate realistic risks from hype, learn the security controls available for AI, and how to apply them to their risks.
A core challenge related to AI at many organizations is third party risk management (TPRM). Students will learn the Risk AIssessment™ methodology for rapidly assessing the security of AI applications. Combining their new knowledge of the realistic risks of AI, students can apply the AIssessment™ methodology to rapidly focus their limited resources to evaluating the most important applications.
Students will evaluate applications in hands-on labs, applying a “learning by doing” instruction methodology. On day two of the course, students will learn the OWASP Top 10 for LLM Applications. Students will learn how to attack and defend against prompt injection with hands-on labs. Students will also target a RAG application and insecure plugins in additional labs.
Wed Feb 03, 8:00 AM - 12:00 PM
Hands-On AI Security Risk Assessment (Continued)This is part 2 of an 8 hour-course. Please also register for part 1.
With AI being embedded in practically every line of business application, security teams are struggling to keep pace with the rapidly moving landscape of AI.
This course trains students on the skills necessary to understand the foundations of AI from a security perspective, threat model applications using AI, identify appropriate AI use cases for security teams and line of business applications, critically evaluate the risk of each, and build out an AI governance program. Students will learn how to separate realistic risks from hype, learn the security controls available for AI, and how to apply them to their risks.
A core challenge related to AI at many organizations is third party risk management (TPRM). Students will learn the Risk AIssessment™ methodology for rapidly assessing the security of AI applications. Combining their new knowledge of the realistic risks of AI, students can apply the AIssessment™ methodology to rapidly focus their limited resources to evaluating the most important applications.
Students will evaluate applications in hands-on labs, applying a “learning by doing” instruction methodology. On day two of the course, students will learn the OWASP Top 10 for LLM Applications. Students will learn how to attack and defend against prompt injection with hands-on labs. Students will also target a RAG application and insecure plugins in additional labs.
