The Evolution of Pentesting with AI

How is AI transforming traditional approaches to offensive security, pentesting, security posture management, security assessment, and even code security? Caleb (linkedin.com/in/calebsima)and Ashish (linkedin.com/in/ashishrajan) spoke to Rob Ragan (linkedin.com/in/robragan), Principal Technology Strategist at Bishop Fox about how AI is being implemented in the world of offensive security and what the right way is to threat model an LLM.

Questions asked:

(00:00) Introductions

(02:12) A bit about Rob Ragan

(03:33) AI in Security Assessment and Pentesting

(09:15) How is AI impacting pentesting?

(14:50 )Where to start with AI implementation in offensive Security?

(18:19) AI and Static Code Analysis

(21:57) Key components of LLM pentesting

(24:37) Testing whats inside a functional model?

(29:37) Whats the right way to threat model an LLM?

(33:52) Current State of Security Frameworks for LLMs

(43:04) Is AI changing how Red Teamers operate?

(44:46) A bit about Claude 3

(52:23) Where can you connect with Rob

Resources spoken about in this episode:

pentestmuse.ai

github.com/AbstractEngine/pentest-muse-cli

docs.garak.ai/garak

github.com/Azure/PyRIT

bishopfox.github.io/llm-testing-findings

microsoft.com/en-us/research/project/autogen