<p>Garth Mollet, Senior Principal Product Security Engineer and Technical Advisor for Product Security at Red Hat, joins host Robert Blumen for a discussion of AI supply chain security. They start with the basics of supply chain security, including the key components of the AI supply chain, and how it differs from the conventional software supply chain. Garth discusses whether the attacks target model weights or inference, and describes the most common attacks and what's in it for the attacker, whether exfiltration, credentials, sabotage, or resources. The episode also considers SPIFFE, SPIRE, attestation, workload identity, and whether AI has the equivalent of "reproducible builds."</p> <p>Brought to you by <a href="https://computer.org" target="_blank" rel="noopener">IEEE Computer Society</a> and <a href= "https://computer.org/software" target="_blank" rel="noopener">IEEE Software</a> magazine.</p>

Podurama

Home

Trending

Personal

Your Podcasts

New Episodes

My Files

Favourite Episodes

Tags (Folders)

Recently Played

Bookmarks

Followed Playlists

SE Radio 729: Garth Mollett on AI Supply Chain Security

Software Engineering Radio - the podcast for professional software developers

AI Chapters

AI Insights

Reviews