Security for the AI supply chain ft. Aeva Black

Technically Speaking with Chris Wright

The software supply chain has always been a critical battleground, but AI introduces an exponential increase in scale and complexity. We are no longer just securing lines of code; we are now responsible for securing the models that generate it. This a new reality that shifts the entire attack surface for distributed IT systems. To explore this new frontier, Red Hat CTO Chris Wright speaks with Æva Black, an open source security and policy expert. Æva Black shares their extensive insights and expertise on: • The fundamental shift from securing code to securing the data, training processes, and models that make up the AI supply chain. • New, emerging attack vectors, such as exploiting model quantization, and how they are analogous to hardware threats like Spectre and Meltdown. • The growing burden of low-quality, AI-generated contributions on open source communities and the risk this poses to project sustainability and security. • Why the concept of “model provenance” is essential for building trust in AI systems. • The rising importance of public policy and government funding to protect and sustain open source as the critical digital infrastructure it has become. Listen in as they explore how the foundational principles of open source including transparency, collaboration, and community-driven governance, offer our most promising path forward. And discover why the health and sustainability of open source communities are directly tied to the security of our AI-powered future and what enterprise leaders can do to move from passive consumers to active contributors in this critical ecosystem.