How does AI change the game with Threat Modeling?

With artificial intelligence reshaping the technology landscape, security leaders are questioning how AI impacts their threat modeling approaches. According to security expert Ted Harrington, the answer might surprise you.

"My hot take on AI is that it doesn't change the game in terms of threat modeling," Harrington explains. While he acknowledges that AI undeniably changes many aspects of technology, he emphasizes that the fundamental principles of building resilient systems remain constant.

Universal Security Principles

The core principles that help organizations build secure systems are "universal and timeless," applying equally to artificial intelligence as they did to previous technological shifts like cloud computing, mobile devices, and IoT. These foundational principles include:

• Principle of least privilege: Being careful about who gets access to what system
• Principle of least economy: Keeping systems as simple as possible
• Careful implementation of security controls

The Real Change: Application vs. Principles

Where AI does make a significant impact is in how these principles are applied. While the underlying security concepts remain unchanged, organizations need to adapt their implementation strategies to address AI-specific contexts and use cases.

"We don't have to rethink and we shouldn't rethink the principles," Harrington emphasizes. "We should apply the principles just the same way we've been doing, and then it's the application of those principles is what changes."

Practical Implications

This perspective offers both reassurance and guidance for security leaders. Rather than completely overhauling their threat modeling approaches for AI, organizations should:

1. Focus on strengthening their implementation of core security principles
2. Adapt their application of these principles to address AI-specific scenarios
3. Maintain consistency in their fundamental security approach while evolving their tactical execution

Looking Forward

As AI continues to evolve, organizations that maintain a strong foundation in these timeless security principles while adapting their practical application will be best positioned to protect their systems and data.

Want to learn more about securing AI in your organization? Join Ted Harrington and other security leaders at the upcoming e360 Executive Roundtable: Navigating and Securing the New Frontier on March 13 in Los Angeles. Register now for an evening of collaborative discussion on AI security challenges and solutions.