AI 成为攻击目标——探索针对 AWS AI 即服务的新型攻击.pdf

1、AI in the Crosshairs:Exploring Novel Attacks on AWS AI-as-a-Service2|2025 Trend Micro Inc.Yash Verma Senior Threat Researcher,Trend Micro From India adding spice to cloud security!From endpoints to cloud breaking,securing&shaping the future of cloud security Cloud detective hunting misconfigs,threat

2、s&vulnerabilities Driving impact shaping products,building detections&making clouds safer Beyond security books,podcasts,travel&mobile photography About Me3|2025 Trend Micro Inc.Agenda Rise Of AI-as-a-Service(AIaaS)AI in the crosshairs:Past incidents and reports Threat Vectors&Targets in AIaaS A Tal

3、e of Cloud Chaos:The AWS AIaaS Supply Chain Attack Threat Monitoring AWS AI Pipelines Best Practices to Prevent Attacks on AWS AIaaS4|2025 Trend Micro Inc.Rise Of AI-as-a-Service5|2025 Trend Micro Inc.Cloud-based service providing AI capabilities Foundational models,APIs,data training&model tuning f

4、rameworks etc Offered by AWS,Google Cloud,Microsoft Azure etcWhat is AIaaS?6|2025 Trend Micro Inc.Why AIaaS?Cuts infrastructure and expertise costs Scales easily with pay-as-you-go pricing Deploys quickly using pre-built models Integrates seamlessly with existing systems Accesses the latest AI innov

5、ations7|2025 Trend Micro Inc.TrendsArtSmarts SurveyGrand view researchs survey8|2025 Trend Micro Inc.AI in the crosshairs:Past incidents and reports9|2025 Trend Micro Inc.Reports Rising Cyberattack30%of AI cyberattacks involve training-data poisoning,model theft,or adversarial samples Gartner93%of s

6、ecurity leaders expect to encounter daily AI attacks by 2025 Exposures&Misconfigurations82%of organizations using Amazon SageMaker have at least one internet-exposed notebook-Orca Security.54%store PII,and 21%have an internet-exposed S3 bucket containing sensitive data38TB of sensitive data accident