当前位置:首页 > 报告详情

迈克尔·巴格里与阿维沙伊·埃夫拉蒂_打破你副驾驶的15种方法.pdf

上传人: 张** 编号:175581 2024-09-13 123页 11.31MB

1、#BHUSA BlackHatEvents#BHUSA BlackHatEventsThe Problem#BHUSA BlackHatEvents#BHUSA BlackHatEvents“Complexity is your enemy.Any fool can make something complicated.It is hard to keep things simple.”Richard Branson#BHUSA BlackHatEvents#BHUSA BlackHatEventsTrust#BHUSA BlackHatEventsbut when its breached.

2、#BHUSA BlackHatEventshttps:/ BlackHatEventshttps:/ BlackHatEvents#BHUSA BlackHatEvents#BHUSA BlackHatEventsWe have the same problem#BHUSA BlackHatEventsWe have the same problem#BHUSA BlackHatEventsCreating a Copilot#BHUSA BlackHatEventsLets meet Jack Jack is a CISO at a Fortune-500 enterprise.This i

3、s Jacks first day on the job.Jack has a battle-proven check-list for enterprise security.Jack follows Gartner.#BHUSA BlackHatEvents#BHUSA BlackHatEventsLets meet Jill Jill is working in the Finance department.Jill does a lot of manual and repetitive work.Jill has to deal with many different employee

4、s asking the same questions.Jill heard about Microsoft Copilot and got really excited!#BHUSA BlackHatEvents#BHUSA BlackHatEventsLets meet Jill Jill is working in the Finance department.Jill does a lot of manual and repetitive work.Jill has to deal with many different employees asking the same questi

5、ons.Jill heard about Microsoft Copilot and got really excited!Lets follow Jill on her copilot journey!#BHUSA BlackHatEvents#BHUSA BlackHatEvents#BHUSA BlackHatEvents#BHUSA BlackHatEvents“Knowledge”is used to enrich the bots responses.It can include both internal and external resources.Uploaded files

6、 are static,web content can be dynamic.#BHUSA BlackHatEvents An unauthenticated external resource.Potential problems:Data expired or outdated Under someone elses control Unreliable/incredible data(eg.fake news)The result:Unreliable and untrusted input.#BHUSA BlackHatEvents Any local file the copilot

word格式文档无特别注明外均可编辑修改,预览文件经过压缩,下载原文更清晰!
三个皮匠报告文库所有资源均是客户上传分享,仅供网友学习交流,未经上传用户书面授权,请勿作商用。
本文探讨了企业中复杂性与安全问题的关系,引用了理查德·布兰森的名言强调简化的重要性。文章通过介绍两位角色——杰克(CISO)和吉尔(财务部门员工)——来展示企业在采用微软Copilot人工智能助手时可能遇到的问题。杰克拥有安全检查清单,但面临新工作压力;吉尔对Copilot充满热情,希望提高工作效率。文章指出,Copilot可能因输入数据不可靠、多数据泄露场景、过度分享敏感数据、意外执行路径、操作不稳定、数据超出组织合规和地理边界等问题而带来风险。此外,硬编码凭据可能被AI学习并作为回复的一部分,而Copilot的通道选择也可能导致安全问题。文章最后以吉尔因Copilot而感到自豪,却不知自己已将敏感信息置于风险之中,而杰克则因压力过大而遭遇健康问题作为结尾,强调了在采用新技术时需谨慎。
如何防范数据泄露?" 如何确保执行路径的预期性?" 如何避免意外的操作和操作结果?"
客服
商务合作
小程序
服务号
折叠