人工智能代理时代的非人类身份安全.pptx

1、Non-Human Identity Security for the AI Era,Albert Attias,Senior Director,Enterprise Identity,Alon Jackson,Co-Founder,CEO,Agenda,The Identity evolution,AI Agent&NHI risks and challenges,NHI Security best practices Workdays case study,Whats next-NHI Security for the AI Era,QA leading provider of enter

2、prise cloud applications for finance and human resources.,The Pioneer and leader of Non-Human Identity Security,Workday is Astrixs Design partner,Customer,and investor,Gartner Top Trends 2025,4,IAM standards,3,Decentralized and hybrid models,2,Artificial intelligence,1,Machine IAM,AI=Artificial Iden

3、tities,Evolution of NHI Creation,Humans authorizing NHIs,Humans creating NHIs,NHIs creating NHIs,1,000 employees,45,000 NHIs,Agentic AI:A Breeding Ground for NHIs,“By 2028,at least 15%of day-to-day work decisions will be made autonomously through agentic AI.”-Gartner1 in 5 organizations have experie

4、nced a security incident related to NHIs*.*Based on a survey of 820 security professionals(by Cloud Security Alliance),The Identities Behind AI Agents,IBM,1979,“,”,Another Month,Another NHI Attack,OktaOct 2023,Oktas support system was breached via stolen credentials,SnowflakeJune 2023,Snowflake Brea

5、ch Exposes 165 Customers Data in Ongoing Extortion Campaign,US TreasuryJan 2025,Chinese hackers breach US treasury network,gain access to some files,DropboxMay 2024,Dropbox says hackers stole customer data,auth secrets from eSignature service,AWSAug 2024,Insecure AWS Stored Credentials Lead to Compr

6、omise of 230 Million Cloud Environments.,Why Workday Decided On NHI Security,App,App,App,App,App,IGA,PAM,ITDR,Owner,Known,Many are orphaned,User,Owner,Sometimes multiple users,often unknown,Permissions,Few admin users,Many over-permissive by nature,Expiration,Every 3/6/9 months(according to company