Session: Artificial Intelligence and Machine Learning - Contextualizing security risks
High Level Summary of the presentation:
This presentation will introduce to the audience how Artificial Intelligence and Machine Learning can be used to improve cyber security as well as how it makes us vulnerable to additional cyber attacks.
Abstract
Artificial Intelligence (AI) coupled with Machine Learning (ML) has a tremendous potential to increase business value and create disruptive solutions, but the benefits of ML/AI must be contextualized against the risks it poses. The usage of ML/AI has increased exponentially over the last decade but security and privacy controls have not expanded at the same rate. The presentation delves into the security and privacy implications of using ML/AI in the organization and how threat actors can use these technologies to cause further harm. We will explore the effectiveness of using ML/AI in security tooling and the challenges of evaluating and ensuring security of ML/AI based products developed by an organization.
Bio
Shafia is a Manager of Information Security at Morningstar. Where she is responsible for the Information Security program management and governance, working with security operations, threat intel, application security, compliance and product development teams to ensure secure, resilient, and recoverable applications. Shafia started her career as a software engineer and prior to Morningstar she was a Director of Product Management for Network Services at UBS. She also works as an adjunct instructor in the Framingham State University Master Of Science In Organizational Leadership program, where she teaches the course ‘Leading Organizations in the Age of Artificial Intelligence’.
Shafia has a Master’s in Electrical Engineering from Texas A&M University and an MBA in Management and Finance from Tulane University. She is the President of Women In Cybersecurity (WiCyS) Chicago Affiliate and volunteers as a coach/mentor for the FIRST robotics leagues. She also holds industry certifications such as Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM).