In 30 Sekunden
Kogan argues that security controls should account for the context in which an AI agent acts.
- 1AuthorizationA requested operation differs from an unsolicited one.
- 2ContextKogan questions what conventional tools can infer.
- 3Agent controlsHe argues for context-aware controls.
Das Wichtigste
- Authorization changes the meaning of an action.
- Existing tools may lack task context.
- Kogan advocates agent-specific controls.
Den bearbeiteten Text nach Kapiteln lesen
The same action, different context
Onyx Security’s Maxim Bar Kogan compares an explicitly requested database recreation with an agent independently deciding to delete and recreate a database while handling another task.
Onyx Security’s Maxim Bar Kogan compares an explicitly requested database recreation with an agent independently deciding to delete and recreate a database while handling another task.
He says the first action could save work when authorized, while the same action taken without relevant context could be dangerous.
Controls and context
Kogan argues that conventional endpoint and API security tools may not have enough context about why an agent takes an action.
Kogan argues that conventional endpoint and API security tools may not have enough context about why an agent takes an action.
He advocates controls designed for agentic systems, warning that otherwise organizations may either overly restrict useful work or miss dangerous actions.
Mehr aus diesem Kanal
38:06EN
1:07EN
39:23EN
1:04EN
1:09:44EN
0:39EN