ReadingResearchRadarInvestment framework
Sign in / Sign up
← Back to reading
NewsTopic · 智能体AI安全治理1 min read·2026-10-18

UiPath CISO Scott Roberts: Identity and Trust Boundaries for AI Agents

In this episode of The Blast Radius podcast, Scott Roberts, Chief Information Security Officer at UiPath, joins Diana Kelley, CISO of Noma Security, to discuss securing agentic AI at scale. Roberts draws on his extensive experience from Microsoft and Coinbase Cloud to explore challenges in managing identities, enforcing trust boundaries, and achieving machine-speed incident response.

ImportanceMaterialEvidenceE2 unreplicatedWrite-upQuick

2026-10-08 21:00 GMT+8

In a recent episode of The Blast Radius podcast, Scott Roberts, Chief Information Security Officer at UiPath, joined host Diana Kelley to delve into the critical topic of "Securing Agentic AI at Scale." As autonomous AI agents are increasingly deployed within enterprises, effectively managing their digital identities, enforcing trust boundaries, and addressing potential threats at high speeds have become new challenges for security teams.

With a rich background ranging from Microsoft's security team during the Blaster worm era to serving as CISO of Coinbase Cloud, Roberts brings lessons learned from securing critical infrastructure to the discussion on autonomous agent security. According to the official episode description, topics covered include the limitations of annual compliance penetration tests, two non-negotiable guardrails for every agent, strategies for enforcing trust boundaries when customers configure their own agents, and how security teams grow and adapt to support agentic AI. The episode also touches upon what incident response at machine speed looks like in practice and board metrics that demonstrate business impact.

Sources

Sign in / Sign up
ReadingResearchRadarInvestment framework
原始出处
youtube.com
↗
Topic

智能体AI安全治理

随着AI智能体从聊天机器人演变为能够自主规划、调用工具并跨系统操作的实体,其安全边界已从模型输出扩展至执行链、身份认证及网络出口。当前治理核心在于解决传统IAM无法应对的“非人类身份”风险:如权限动态累积、缺乏归因审计及未受控的网络连接。

4 steps3 piecesUpdated 2026-10-18 07:43

How it got here

  1. 2026-08-29清华大学DeepKernel Lab发布论文《AgentKernel》,提出首个信任原生智能体操作系统,主张将安全作为第一类设计约束,通过内核级强制服务解决提示注入和内存中毒问题。
  2. 2026-10-14IBM举办网络研讨会,强调智能体身份管理的四个关键缺口:无治理的持久访问、未经审查的权限提升、缺乏归因以及碎片化控制,推荐采用Vault和Verify实现零信任动态凭证。
  3. 2026-10-18微软Foundry博客演示如何通过RAI策略为托管智能体设置可测试的网络出口边界,区分审计与强制模式,明确工具列表不等于网络边界。

What is still unsettled

  • 操作系统级安全架构(如AgentKernel)在实际生产环境中如何平衡性能开销与安全强制性?
  • 在开放智能体网络中,基于区块链的信任机制能否有效解决跨组织身份验证与价值结算的可扩展性问题?
  • 现有的应用层治理工具(如Microsoft AGT)是否足以应对日益复杂的代理间协作攻击,还是需要更底层的内核支持?

Also in this thread

  • Microsoft Foundry Blog: Setting Testable Network Egress Boundaries for Hosted AI Agents2026-10-18
  • Former Google Cloud CISO Phil Venables on AI Agent Governance2026-10-18
Read the full topic →
Continue researching →