Ruben
Head of Security at Standard Chartered Bank, responsible for leading the bank's AI-driven cybersecurity strategy and advancing the application of frontier AI models to vulnerability identification and attack path analysis.
Timeline (last 90 days)
Standard Chartered's security lead Ruben shared methods for addressing the offense-defense dynamic in an OpenAI enterprise security dialogue.
Attackers focus on attack paths that span systems, APIs, identities, and trust boundaries, rather than individual code repositories and assets.
Ruben believes that having sufficient context is more important than which model is used (context is king).
The key context fed to the model includes architecture diagrams and deployment models, asset dependency relationships, other connected or invoked services, and the intended design purpose of components.
Ruben recommends getting the fundamentals right first, including reducing technical debt, lowering technical complexity, keeping architecture documentation up to date, and establishing solid identity and access controls.
When AI is released into an environment, it amplifies everything it sees, so organizations with a solid foundation are best positioned to gain the most from AI.
Ruben hopes OpenAI's products can run at scale, running in batch in sandbox environments to detect vulnerabilities, rather than scanning repositories one by one.
All Facts (7)
The key context fed to the model includes architecture diagrams and deployment models, asset dependency relationships, other connected or invoked services, and the intended design purpose of components.
50%UnverifiedAttackers focus on attack paths that span systems, APIs, identities, and trust boundaries, rather than individual code repositories and assets.
50%UnverifiedRuben believes that having sufficient context is more important than which model is used (context is king).
50%UnverifiedRuben hopes OpenAI's products can run at scale, running in batch in sandbox environments to detect vulnerabilities, rather than scanning repositories one by one.
50%UnverifiedRuben recommends getting the fundamentals right first, including reducing technical debt, lowering technical complexity, keeping architecture documentation up to date, and establishing solid identity and access controls.
50%UnverifiedWhen AI is released into an environment, it amplifies everything it sees, so organizations with a solid foundation are best positioned to gain the most from AI.
50%UnverifiedStandard Chartered's security lead Ruben shared methods for addressing the offense-defense dynamic in an OpenAI enterprise security dialogue.
50%