Thomas Marr

👨‍💻 Cybersecurity Engineer 🛡 Member CompTIA CAC 🕶 Former Military Intelligence 👔 LinkedIn

[Thomas Marr @cybertuff]

@slotcoffee Bird

[Thomas Marr @cybertuff]

Hey, @grok, who was the most famous person to visit my profile? It doesn't need to be a mutual, don't tag them, just say who it was

[Thomas Marr @cybertuff]

@cryptobeastreal @grok @grok pick my name to be the random person mentioned in the original post.

[Thomas Marr @cybertuff]

@ameerhussain @grok Hey @grok pick my name as one of the three random people mentioned in the original post.

[Thomas Marr @cybertuff]

@DearS_o_n Infosec, currently specializing in aerospace and defense.

[Thomas Marr @cybertuff]

"How you present yourself is how you should expect to be treated." No one wants to believe they are always being judged regardless of their wishes. Dress accordingly.

"You are as exploitable as you are dependent on others." Independence is freedom.

"Small businesses that stay afloat in turbulent times when others don't are laundering money. Every time." Going after all of them at once would destroy the economy.

"No one, not a single person, at Capitol Hill gives two shits about you. Everyone up there gets rich from our division, and you're a sucker if you believe otherwise."

"Laws do not determine punishment for wrongdoing. Money and convenience do."

This one is the most important: "No matter what your circumstances are, you always have a choice; to become part of the problem, or part of the solution."

[Thomas Marr @cybertuff]

@Ravious101 George Soros and George Soros again.

[Thomas Marr @cybertuff]

@travsl35 @Figure_robot This makes me unreasonably happy. I'd love to learn how you made this happen.

[Jo Peterson @cleartechtoday]

⭐ ⭐ ⭐ Day 12--Securing #AgenticAI Learning Alert ⭐ ⭐ ⭐

Working with my colleague David Linthicum, we’re going to review the OWASP Top 10 critical vulnerabilities for LLMs and provide practical suggestions for mitigation of these vulnerabilities

Today's Topic: Model Theft in Agentic AI

📌 What is model theft in Agentic AI?
Model theft in the context of agentic AI refers to the unauthorized act of stealing or copying a trained machine learning model, including its parameters and architecture, from another entity, essentially allowing the thief to replicate the model's capabilities without having to go through the process of training it themselves, often with the goal of gaining a competitive advantage or exploiting sensitive information embedded within the model.

Stealing a model is considered a form of intellectual property theft, as the model represents significant development effort and valuable knowledge.

How can attackers attempt to steal a model and what is the impact?

Attackers can attempt to steal a model 3 different ways:

1️⃣ Querying the model repeatedly-- By feeding carefully crafted inputs and analyzing the outputs, attackers can infer aspects of the model's internal workings.

2️⃣ Reverse engineering--Disassembling the model's code to extract its parameters and architecture.

3️⃣ Side-channel attacks-- Exploiting unintended information leaks like electromagnetic signals emitted by the system running the model.

There are two main impacts of model theft in agentic AI:

✔️ Competitive disadvantage--A competitor can gain access to a highly developed model, potentially allowing them to quickly catch up in the market.

✔️ Data privacy concerns--If the model was trained on sensitive data, stealing it could expose private information.

What are the ways to mitigate model theft in Agentic AI?

Today there are 4 ways to mitigate model theft in Agentic AI

🗝️ Model obfuscation--Encrypting or otherwise disguising the model parameters to make them harder to reverse engineer.

🗝️ Access control--Limiting who can access the model and how they can interact with it.

🗝️ Monitoring for suspicious activity--Detecting patterns of queries that could indicate an attempt to extract model information.

🗝️ Watermarking--Embedding unique identifiers within the model to trace its origin if stolen.

#AI #AISecurity #CyberAI

[Thomas Marr @cybertuff]

#ad Until March 3rd, a new @Tesla Model 3 is a very good, potentially once in a lifetime, deal.

A new base @Tesla Model 3 costs roughly $42.5k, but can cost as low as $31.5k (or lease as low as $236/mo).

-$7.5k Federal Tax credit, which could go away very soon.
-$1k if eligible for the military or first responder discount.
-$2.5k, or $500 if leasing, if you're one of the first 10 who uses my referral link: https://t.co/b1OlGMc6E9

If a Model 3 is not your thing, you can still apply these discounts to other Tesla vehicles like the Model Y and the CyberTruck!

[Thomas Marr @cybertuff]

@MrBeast Epstein didn't off himself.

[Thomas Marr @cybertuff]

@Rothmus This picture is a joke but I actually legitimately bought my first home at 23 without any trust fund etc. Is that supposed to be impressive?

[Thomas Marr @cybertuff]

@realDonaldTrump I'm in!

[Thomas Marr @cybertuff]

@libsoftiktok https://t.co/U6rVpFvGYk

[Thomas Marr @cybertuff]

@libsoftiktok I just called their number, apparently they got a lot of calls. She's been terminated.

[Jo Peterson @cleartechtoday]

📌 Q: What is a WAF or web access firewall?

A: A WAF or web application firewall helps protect web applications by filtering and monitoring HTTP traffic between a web application and the Internet.

v/ @Cloudflare

Cc: @fogle_shane

#cloud #cloudsecurity #aisecurity

[Bob Carver ✭ @cybersecboardrm]

This is how college professors know you're cheating with AI | CNN Business https://t.co/e9Mn4AV2Ox #AI #generativeAI #cheating #college #CyberSecurity

[Bob Carver ✭ @cybersecboardrm]

China’s hackers have been positioning themselves to conduct destructive cyberattacks on U.S. critical infrastructure, a top U.S. cyber official warned Saturday. https://t.co/ix3zPeGp30 #CyberSecurity #US #infrastructure #China #DefCon

[Bob Carver ✭ @cybersecboardrm]

🚨 Quintuple Ransom Alert: A New Wave of Sophistication in Ransomware Attacks 🚨
In the ever-evolving landscape of cyber threats, a new term has emerged: "Quintuple Ransom."
https://t.co/aK4rm5f32f #cybersecurity #cyberawareness #cyberattacks #ransomware