关于这一集
The principle of least privilege access is ubiquitous in recommendations, but perhaps too uncommon in practice. Alex Olivier explains how the AuthZen Working Group has been approaching new standards, guidelines, and practical deployment patterns to make it easier for orgs to establish more refined and correct access policies. It's a problem that predates LLMs, but also one that agents and MCPs made all the more acute. We talk about what intent means when trying to constrain agents' activities, what role LLMs have in policy decisions, and how LLMs can help create a much-needed inventory of access controls.
Segment Resources:
- https://www.cerbos.dev/blog/dimmer-switch-not-a-kill-switch-rethinking-ai-agent-governance
- https://www.cerbos.dev/blog/multi-hop-delegation-ai-agents
- https://openid.net/wg/authzen/
Show Notes: https://securityweekly.com/asw-403
英语
美国
文字稿 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
本播客中的其他单集
In the security news this week:
Convert this router into an SDR
Ivanti straight to root
Anthropic's AI worm FUD
A kernel exploit to fix downloads
Supermarket refrigeration attacks
400 mystery Java vulnerabilities
Authentication bypass
Russia meets the data-center war
Stop & Shop at...
Interview with Michael Jenkins from ThreatLocker Securing AI on the Endpoint - Zero Trust or Bust
Michael joins us for the first time to discuss strategies for securing the latest evolution of AI: local endpoint-based AI agents. Tools like Claude Code, OpenAI Codex, and Google AntiGravity give e...
Businesses face severe challenges when balancing short-term efficiency with long-term adaptability against unforeseen cyber events. And Artificial Intelligence has only added to those challenges. How should organizations prepare?
Bill O'Connell, Chief Security Officer (CSO) at Commvault, joins B...
Mr. Sparkle, Burger King, Pwnscape, Linux, Cisco, GitHub, Microsoft, Josh Marpet, and More on this episode of the Security Weekly News.
Show Notes: https://securityweekly.com/swn-625
The OWAS Mobile Application Security (MAS) project recently released an updated version of its guidance, with excellent advice organized into common weaknesses, a verification standard for devs (MASVS), and a testing guide (MASTG). Ryan Lloyd and Jan Seredynski from Guardsquare dive into the proj...
免责声明: 本页面嵌入的播客和封面图片来自 Security Weekly Productions，归其所有者所有，与 Listen Notes, Inc. 无关联，也未获得 Listen Notes, Inc. 背书。
