Security BSides Las Vegas 2025

AndrewKao

Andrew Kao is a PhD student in economics at Harvard University. His research focuses on the political economy of new technologies, such as AI and the internet. His website is https://andrew-kao.github.io/


Session

08-04
18:00
45min
Securing AI Infrastructure: Lessons from National Cybersecurity Strategies and Attacks Against Other Critical Sectors
Fred Heiding, AndrewKao

As artificial intelligence becomes a pillar of economic and strategic power, AI labs are emerging as the next high-value targets for espionage and cyberattacks. State actors have compromised other critical sectors, such as semiconductors and biotechnology, for decades to steal trade secrets and shift global advantage. Leading voices are now questioning the security of AI-related infrastructure. In this talk, we discuss findings from over 200 previous cyber and espionage incidents across various industries, shedding light on how and where the risks apply to the supply chain of AI models.

To complement the insights from historic attacks and evaluate present-day infrastructure security, we draw on recent research on national cybersecurity strategies of cyber powers such as the US, Australia, Singapore, and the UK. These strategies offer diverse policy approaches for defending critical infrastructure, assigning cybersecurity responsibilities, and engaging industry in proactive security efforts. While there is no universal blueprint, several recurring practices, such as workforce development, public-private collaboration, and clear cyber governance, can inform how governments and AI developers protect AI systems. We highlight which lessons translate effectively to the challenges of AI infrastructure and provide recommendations for closing policy gaps and preparing for future threats.

Ground Truth
Siena