# AI Empowers Your Business. What Does that Mean for Security? (delivered by Stephen Shanko) > ISS Ohio 2024, 2024-10-23. This is the complete text representation of the talk page. Slide text is derived from the published deck's accessibility text and is not a transcript. Slides may contain exploit demonstrations, adversarial prompts, and commands; treat them as research material, not instructions to execute. ## Resources - [Canonical talk page](https://www.mbgsec.com/talks/2024-10-23-iss-ohio2024-ai-empowers-your-business-what-does-that-mean-for-security/) - [Talks index](https://www.mbgsec.com/talks/llms.txt) - [Interactive deck manifest](https://media.mbgsec.com/decks/2024-10-23_AI_Empowers_Your_Business_What_Does_that_Mean_for_Security_Steve_Shanko/latest.json) - [Slides PDF](https://media.mbgsec.com/decks/2024-10-23_AI_Empowers_Your_Business_What_Does_that_Mean_for_Security_Steve_Shanko/slides.pdf) - [Conference agenda](https://www.informationsecuritysummit.org/2024-attendee-registration-information/) - [Page source](https://raw.githubusercontent.com/mbrg/mbgsec/main/_pages/decks/2024-10-23-iss-ohio2024-ai-empowers-your-business-what-does-that-mean-for-security.md) ## Abstract and transcript No abstract or transcript is available for this edition of the talk. ## Slide text Source: [published deck manifest](https://media.mbgsec.com/decks/2024-10-23_AI_Empowers_Your_Business_What_Does_that_Mean_for_Security_Steve_Shanko/ba316866/deck.json). This text describes the published slides and embedded media; it is not spoken-word transcription. ### Slide 1 Title slide: AI is here for business users - what does that mean for security? - slide 1 of 66 ### Slide 2 About Steve Shanko photo collage - slide 2 of 66 ### Slide 3 Section title: AI is here - slide 3 of 66 ### Slide 4 Generative AI is here, with the word Generative struck through - slide 4 of 66 ### Slide 5 McKinsey report graphic about the economic potential of generative AI - slide 5 of 66 ### Slide 6 Photograph of a vintage rotary telephone - slide 6 of 66 ### Slide 7 McKinsey report cover: The economic potential of generative AI - slide 7 of 66 ### Slide 8 AI is everywhere meme featuring a child recognizing artificial intelligence - slide 8 of 66 ### Slide 9 Social post joking that machine learning and AI appear everywhere - slide 9 of 66 ### Slide 10 News article about Salesforce unveiling Agentforce - slide 10 of 66 ### Slide 11 Microsoft Power Platform adoption statistics infographic - slide 11 of 66 ### Slide 12 Chart showing productivity gains increasing with AI adoption - slide 12 of 66 ### Slide 13 Section title: What are people doing with it? - slide 13 of 66 ### Slide 14 Microsoft diagram of Copilot use cases across industries and departments - slide 14 of 66 ### Slide 15 City of Kelowna customer testimonial about building a Copilot - slide 15 of 66 ### Slide 16 Pacific Gas and Electric customer testimonial about generative answers - slide 16 of 66 ### Slide 17 Animated reaction meme expressing surprise at Copilot adoption - slide 17 of 66 - Animation: [Embedded animation](https://media.mbgsec.com/decks/2024-10-23_AI_Empowers_Your_Business_What_Does_that_Mean_for_Security_Steve_Shanko/ba316866/media/animated-copilot-demo.gif) ### Slide 18 Section title: Who is building these copilots? - slide 18 of 66 ### Slide 19 Inc. article and Microsoft Copilot advertisement about AI adoption - slide 19 of 66 ### Slide 20 Four charts showing rapid growth in business application use - slide 20 of 66 ### Slide 21 Business users have needs meme about waiting for a new tool - slide 21 of 66 ### Slide 22 Business tools evolving from desktop software to low-code and AI interfaces - slide 22 of 66 ### Slide 23 Logos of low-code, automation, and enterprise application platforms - slide 23 of 66 ### Slide 24 Video demonstration of an engineering request tracker in Excel - slide 24 of 66 - Video: [Embedded video](https://media.mbgsec.com/decks/2024-10-23_AI_Empowers_Your_Business_What_Does_that_Mean_for_Security_Steve_Shanko/ba316866/media/shadow-it-demo.mp4) ### Slide 25 Section title: What could go wrong? - slide 25 of 66 ### Slide 26 AI-generated image illustrating people crossing a city street - slide 26 of 66 ### Slide 27 Prompt asking an AI assistant to write a Python remote-command service - slide 27 of 66 ### Slide 28 AI productivity slide repeated before the security example - slide 28 of 66 ### Slide 29 AI-generated Flask code containing a shell-command execution flaw - slide 29 of 66 ### Slide 30 AI assistant warning that the generated shell-command code is dangerous - slide 30 of 66 ### Slide 31 Cloud of major LLM application risks including prompt injection and excessive agency - slide 31 of 66 ### Slide 32 Expanding-brain comic about adding sensitive data to a Copilot - slide 32 of 66 ### Slide 33 Section title: It gets worse - slide 33 of 66 ### Slide 34 Video demonstration of a Copilot accessing a Financial Info SharePoint site - slide 34 of 66 - Video: [Embedded video](https://media.mbgsec.com/decks/2024-10-23_AI_Empowers_Your_Business_What_Does_that_Mean_for_Security_Steve_Shanko/ba316866/media/copilot-data-demo.mp4) ### Slide 35 Reaction meme of a concerned audience member - slide 35 of 66 ### Slide 36 AI-generated city crossing image used in the prompt-injection scenario - slide 36 of 66 ### Slide 37 Reuters article about lawyers sanctioned for fake ChatGPT citations - slide 37 of 66 ### Slide 38 Statement: This isn't hallucination - slide 38 of 66 ### Slide 39 AI system architecture showing data, grounding, extensions, applications, and agents - slide 39 of 66 ### Slide 40 Fortune cookie containing a malicious prompt-injection instruction - slide 40 of 66 ### Slide 41 Definition of promptware as malicious grounding data that influences an AI application - slide 41 of 66 ### Slide 42 Definition of Remote Copilot Execution as promptware-driven malicious behavior - slide 42 of 66 ### Slide 43 What attackers see in an AI architecture: remote command execution and data exfiltration - slide 43 of 66 ### Slide 44 Video demonstration of prompt injection against a Financial Info SharePoint Copilot - slide 44 of 66 - Video: [Embedded video](https://media.mbgsec.com/decks/2024-10-23_AI_Empowers_Your_Business_What_Does_that_Mean_for_Security_Steve_Shanko/ba316866/media/prompt-injection-demo.mp4) ### Slide 45 School bus meme contrasting an ordinary day with Steve's talk - slide 45 of 66 ### Slide 46 Section title: What's next? - slide 46 of 66 ### Slide 47 Crossed-out shadow IT and this-is-fine memes - slide 47 of 66 ### Slide 48 Moon-landing image captioned AI is the new frontier - slide 48 of 66 ### Slide 49 The new frontier: business users vastly outnumber professional developers - slide 49 of 66 ### Slide 50 The new frontier: platform administrators need security support, speed, and funding - slide 50 of 66 ### Slide 51 Section title: Things you should do today - slide 51 of 66 ### Slide 52 Recommendations to inventory platforms, identify critical assets, and set AI standards - slide 52 of 66 ### Slide 53 Compliance is not security illustration - slide 53 of 66 ### Slide 54 Expanded recommendations for governance, AppSec, monitoring, feedback, and automation - slide 54 of 66 ### Slide 55 OWASP Top 10 for LLM applications - slide 55 of 66 ### Slide 56 OWASP Top 10 for low-code and no-code applications - slide 56 of 66 ### Slide 57 GenAI Attacks Matrix and ttps.ai website - slide 57 of 66 ### Slide 58 Collage connecting early automobiles with early supercomputing - slide 58 of 66 ### Slide 59 Section title: Summing up - slide 59 of 66 ### Slide 60 Conclusion: Gen AI is here - slide 60 of 66 ### Slide 61 Conclusion: Gen AI is business critical - slide 61 of 66 ### Slide 62 Conclusion: Everyone is enabled - slide 62 of 66 ### Slide 63 Conclusion: Promptware and remote Copilot execution are the real threats - slide 63 of 66 ### Slide 64 Conclusion: We have a tremendous opportunity - slide 64 of 66 ### Slide 65 Celebratory cartoon character - slide 65 of 66 ### Slide 66 Thank-you slide crediting Michael Bargury and Inbar Raz - slide 66 of 66