从CUBE对Oracle“AI Cyber attacks Are Escalating：如何保障你现在的数据”的报导中
代理AI安全正在测试企业在软件获得获取敏感数据和代表用户行事的能力时给予信任。 挑战从控制个别请求到管理可跨越多个系统和业务流程的行动。
这种扩大的覆盖范围使安全成为建筑和业务问题，有关出入、监督和恢复的决定日益相互关联。 根据CUBE Research的Krista案，企业必须考虑这些决定如何影响其持续中断经营的能力。
她的称表示，“关于网络应变能力与企业应变能力，[复原]确实需要在前面建造，因为人们认识到我们不能仅仅建造足够高的围栏。”
案件分析员Dave Vellante在CUBE报道Oracle“AI Cyber attacks Are Escalating：如何保障你现在的数据”虚拟事件时，讨论聚集了Oracle执行官和技术专家，审查不断变化的威胁环境及其对企业的影响。 (* 下文披露。 )
以下是CUBE与Dave Vellante及Krista Case的完整视频讨论：
以下是CUBE对Oracle“AI Cyber attacks Are Esclating：如何保障你现在的数据”的报导
透视#1：数据安全必须在应用程序和AI agents下执行。
代理AI安全需要一致的授权边界，因为agents创建企业数据的新路径。 Oracle Corp.的方法将执行从单个应用程序转移到数据库，减少了对开发者分别执行保护的依赖，据Oracle数据库技术执行副总裁Juan Loaiza说。
他告诉CUBE, “人们非常聪明，如何用语言表达AI, “如果在这个数据层中，我们强制要求每个终端用户只能看到他们的数据，那么无论你放的是什么提示。.....代表该用户行事的agent只能看到该用户的数据。”
将执法移入数据库也会改变企业管理安全的方式：无论哪个应用程序或agent请求访问，保护必须持有。 Oracle将数据库访问时应用的控件与集中安全管理相结合，包括云基Oracle数据安全及自我管理的Oracle数据库安全中心，他解释了Oracle数据库安全高级副总裁维平·萨马尔(Vipin Samar)与Oracle数据库安全产品管理副总裁大卫·诺克斯(David Knox)一同出现。
“AI能够非常容易和自然地从一个数据库转移到另一个数据库”,Samar 称。 “我们必须在整个机队、用户和数据之间有360度的全景。 只有这样，你才能真正获得有效的安全保障。”
对于基于agent的应用程序的合作伙伴来说，该架构将agent生成的查询与其授权检索的数据区分开来。 Accenture Enkitec Group使用Oracle Deep Data Security在数据库内部执行访问规则，允许agents查询共享知识库，同时保留不同的授权级别，据Accenture Enkitec Group的gen AI/AI技术创新首席总监Roger Cornejo称。
Cornejo告诉CUBE说，“我们需要确保它也扩大规模。 现在，我们测试了它，在15秒或更短的时间内将大部分结果反馈给300个同时询问。”
以下是CUBE与维平·萨马尔和大卫·诺克斯的完整视频：
透视2号：代理AI安全依赖于准备的系统和问责监督。
支持agents需要企业对其依赖的系统进行现代化改造。 据星座研究公司副总裁兼主要分析师Holger Mueller说，推迟收养使各组织面临AI驱动的威胁，而技术债务则构成复合体。
「今年，“明年将是扩大后端系统的大复兴。”
准备状态还需要知道agents在哪里建造，以及他们能够接触到哪些敏感资产。 根据Oracle Cloud Engineering集团副总裁Johnnie Konstantas(图)的说法，该清单有助于各组织建立对授权工作的控制。
她告诉CUBE, “Agentic AI 带来认为agent和几个子agents作为个人的代名词可以访问数据”。 “因此，身份以新的形式出现，agent是一种携带这些权限同时进入，并且[可以]甚至在某些工作流程上采取行动。 拥有良好的身份，以便你能够统一和普遍。”
这些技术控制需要组织支持。 据Oracle客户成功公司高级副总裁兼首席信息安全干事Brennan Baybeck说，基础治理、安全基础和明确理解的客户和供应商责任仍然是企业AI部署方面的漏洞。
他告诉CUBE, “人类从未像我们所称的那样，更需要帮助控制这些机器人。” “我们曾说，人类是最薄弱的环节。 但现在，我要说的是机器人是最强大和最有潜在危险的环节，人类现在是一个必不可少的环节。
以下是CUBE对Holger Mueller的完整视频采访：
透视3号：网络复原力需要值得信赖的恢复和持续改进。
Agentic AI安全必须说明生产系统和备份都可能成为目标，据Oracle数据库，产品管理的高级副总裁Ashish Ray在Oracle表示。 单独的行政控制和网络隔离保护了回收资产，而Oracle的零数据损失回收工具则检查备份完整性和可回收性。
" 已备份但无法验证的数据是Schrödinger的数据，" 在活动期间，他称。 “数据可以被备份，而你不能停留在功劳上，因为当你开始尝试恢复、恢复和使用数据的时候，你可能会发现数据不能使用，因为也许存在一些潜在的验证检查，即所发生的腐败。 ”
安全方案还必须说明攻击者发现和利用弱点的速度比人们能够测试、批准和部署解决办法的速度快。 Zulfikar Ramzan认为，维护者对关键商业资产的知识有助于他们优先保护和补救，他是RSA Security USA LLC的前首席技术官和首席数字官。
他对CUBE说，“不断从发生的每一个事件中吸取教训”。 但也许你不该这样。 接受这种投入，将这种见解[并]定期反馈到你的安全方案。”
以下是Ashish Ray的完整视频采访：
为了更多观看CUBE对Oracle的“AI网络攻击是升级的：如何保障你现在的数据”的报导
(* 披露：CUBE是Oracle的“AI Cyber attacks Are Escalating：如何保障你现在的数据”虚拟事件的付费媒体合作伙伴。 CUBE活动报道的主办方对CUBE或SiliconANGLE上的内容没有编辑控制。 ).
照片：SiliconANGLE
SiliconANGLE联合创始人John Furrier的留言：
支持我们的使命，通过与CUBE社区接触，保持内容的开放和自由。 加入CUBE的校友信托网络，其中技术领导者相互连接，分享情报，创造机会。
- 15M+观看CUBE视频，为AI、云层、网络安全等各种对话提供动力
- 11.4k+CUBE校友——通过独特的信任网络与11400多名技术和企业领袖建立联系，塑造未来
你是AWS客户吗？在财务上支持SiliconANGLE，从我们的市场门户页面和链接购买您的AWS服务：https://siliconangle.com/aws-marketplace/.
关于 SiliconANGLE 媒体
SiliconANGLE Media由技术视觉家约翰·弗瑞尔(John Furrier)和戴夫·韦兰特(Dave Vellante)创立，构建了产业领先数字媒体品牌的动态生态系统，达到1500+百万精英技术专业人士。 利用CUBEAi.com神经网络，帮助科技公司以数据为导向做出决策
本文由 AI图鉴自动抓取并翻译，版权归原作者所有；如需查看原文请点下方链接。
Three insights you may have missed from theCUBE’s coverage of Oracle’s “AI Cyberattacks Are Escalating: How to Secure Your Data Now” virtual event
Agentic AI security is testing where enterprises place their trust as software gains the ability to access sensitive data and act on users’ behalf. The challenge extends from controlling individual requests to governing actions that can span multiple systems and business processes.
That expanding reach makes security an architectural and operational concern, with decisions about access, oversight and recovery increasingly connected. Enterprises must consider how those decisions affect their ability to keep operating through disruption, according to theCUBE Research’s Krista Case.
“With agentic AI, we have these new agentic-fueled attacks that are making all of the headlines,” she said. “When it comes to cyber resilience and business resilience, the impact that this has had is that it’s really become a part of the security conversation. [Resilience] really needs to be built in up front because there is a recognition that we cannot just build the fences high enough.”
Case and fellow analyst Dave Vellante examined these pressures during theCUBE’s coverage of Oracle’s “AI Cyberattacks Are Escalating: How to Secure Your Data Now” virtual event. The discussions brought together Oracle executives and technology experts to examine the changing threat landscape and its implications for enterprises. (* Disclosure below.)
Here’s theCUBE’s complete video discussion with Dave Vellante and Krista Case:
Here are three insights you may have missed from theCUBE’s coverage of Oracle’s “AI Cyberattacks Are Escalating: How to Secure Your Data Now” virtual event:
Insight #1: Data security must be enforced beneath applications and AI agents.
Agentic AI security requires a consistent authorization boundary as agents create new paths to enterprise data. Oracle Corp.’s approach shifts enforcement from individual applications into the database, reducing reliance on developers to implement protections separately, according to Juan Loaiza, executive vice president of Oracle Database Technologies at Oracle.
“People are very clever about how they can phrase things in order to make AI do things that you would have basically thought you had prevented by prompting the AI,” he told theCUBE. “If, at that data layer, we enforce that each end user can only see their data, then no matter what kind of prompt you put … the agent that’s acting on behalf of that user can only see that user’s data.”
Moving enforcement into the database also changes how enterprises manage security: Protections must hold regardless of which application or agent requests access. Oracle combines controls applied during database access with centralized security management, including cloud-based Oracle Data Safe and self-managed Oracle Database Security Central, explained Vipin Samar, senior vice president of Database Security at Oracle, who appeared alongside David Knox, vice president of Database Security product management at Oracle.
“AI can move very easily and naturally from one database to the other,” Samar said. “We have to have [a] full 360-degree view across [the] entire fleet, across your users, across your data. Only then can you really have effective security.”
For partners building agent-based applications, that architecture separates the queries an agent generates from the data it is authorized to retrieve. Accenture Enkitec Group used Oracle Deep Data Security to enforce access rules inside the database, allowing agents to query a shared knowledge repository while preserving different authorization levels, according to Roger Cornejo, technology innovation principal director of gen AI/AI at Accenture Enkitec Group.
“We have dozens, probably 40 or more agents that are hitting this application,” Cornejo told theCUBE. “We needed to make sure it would scale as well. Right now, we have tested it to scale to 300 simultaneous queries returning most of the results in 15 seconds or less.”
Here’s theCUBE’s complete video with Vipin Samar and David Knox:
Insight #2: Agentic AI security depends on prepared systems and accountable oversight.
Supporting agents requires enterprises to modernize the systems they depend on. Delaying adoption leaves organizations exposed to AI-powered threats while technical debt compounds, according to Holger Mueller, vice president and principal analyst at Constellation Research Inc.
“This year, everybody’s fighting about what is the better agentic framework,” he said. “Next year is going to be the big renaissance of scaling the backend systems.”
Readiness also requires knowing where agents are being built and which sensitive assets they can reach. That inventory helps organizations establish controls around delegated work, according to Johnnie Konstantas (pictured), group vice president, Oracle Cloud Engineering, at Oracle.
“Agentic AI brings to the fore this idea that an agent and several sub-agents functioning as a proxy of an individual can access data,” she told theCUBE. “So, identity takes on a new form in that the agent is kind of carrying those permissions along to access and [can] maybe even take action on a certain workflow. Have good identity in place to the extent that you can have it be uniform and pervasive.”
Those technical controls need organizational backing. Foundational governance, security basics and clearly understood customer and provider responsibilities remain gaps in enterprise AI deployments, according to Brennan Baybeck, senior vice president and chief information security officer of Oracle Customer Success at Oracle.
“Humans have never been more critical to help control these robots, as we call them,” he told theCUBE. “We used to say humans are the weakest link. But now, what I’m saying is that robots are the most powerful and potentially dangerous link, and humans are now an essential link.”
Here’s theCUBE’s complete video interview with Holger Mueller:
Insight #3: Cyber resilience requires trusted recovery and continuous improvement.
Agentic AI security must account for the possibility that production systems and backups will both become targets, according to Ashish Ray, senior vice president of Oracle Database, product management, at Oracle. Separate administrative controls and network segregation protect recovery assets, while Oracle’s Zero Data Loss Recovery Appliance checks backup integrity and recoverability.
“Data that is backed up but cannot be validated is Schrödinger’s data,” he said during the event. “The data could be backed up, and you cannot rest on the laurels because the moment when you start trying to restore, recover the data and use it, you may find out that the data cannot be used because maybe there was some underlying validation checks, underlying corruptions that happened.”
Security programs must also account for attackers discovering and exploiting weaknesses faster than people can test, approve and deploy fixes. Defenders’ knowledge of critical business assets helps them prioritize protection and remediation, according to Zulfikar Ramzan, former chief technology officer and chief digital officer of RSA Security USA LLC.
“Continuously learn from every incident that occurs,” he told theCUBE. “Look at those near misses where you got away with it, but maybe you shouldn’t have. Take that input, take that insight [and] feed it back into your security program on a regular basis.”
Here’s the complete video interview with Ashish Ray:
To watch more of theCUBE’s coverage of Oracle’s “AI Cyberattacks Are Escalating: How to Secure Your Data Now” virtual event, here’s our complete video playlist:
(* Disclosure: TheCUBE is a paid media partner for Oracle’s “AI Cyberattacks Are Escalating: How to Secure Your Data Now” virtual event. Sponsors of theCUBE’s event coverage do not have editorial control over content on theCUBE or SiliconANGLE.)
Photo: SiliconANGLE
A message from John Furrier, co-founder of SiliconANGLE:
Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.
- 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
- 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network
Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: https://siliconangle.com/aws-marketplace/
About SiliconANGLE Media
Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.
Auto-fetched and translated by AI Atlas. All rights belong to the original author.