[ { "start": 0.22, "end": 6.64, "text": "What if the greatest threat to your organization isn't lurking in the shadows but is accelerating right in front of you?" }, { "start": 7.6, "end": 11.7, "text": "In a world where AI can uncover vulnerabilities and minutes, where it once took weeks." }, { "start": 12.08, "end": 16.5, "text": "And we're nearly two-thirds organizations don't even know where all their data lives." }, { "start": 17.0, "end": 20.22, "text": "The rules for cybersecurity are being rewritten...in real time!" }, { "start": 25.5, "end": 34.28, "text": "Data is expanding faster than our ability to protect it, attackers are moving at machine speed and the race to secure what matters most is no longer theoretical." }, { "start": 34.4, "end": 36.6, "text": "It's now happening right in front of us." }, { "start": 38.1, "end": 42.32, "text": "I'm Steve Prentice And this is The Talos Security Sessions podcast." }, { "start": 56.88, "end": 74.76, "text": "To help us understand how to get a grasp on this enormous transition, Liz Kelly co-producer of the TALUS Security Sessions podcast met up with Scott Crawford information security research head at Fort fifty one Research and Todd Moore global VP and GM of data security products at TALIS." }, { "start": 75.42, "end": 81.16, "text": "On the floor of the RSAC twenty twenty six conference in San Francisco here's The conversation." }, { "start": 81.9, "end": 83.2, "text": "thank you scott for joining us today." }, { "start": 83.76, "end": 84.52, "text": "Thank You very much." }, { "start": 84.64, "end": 85.56, "text": "I appreciate your being here" }, { "start": 85.8, "end": 86.08, "text": "and tough." }, { "start": 86.86, "end": 88.52, "text": "Thank you and it's a pleasure being here with." }, { "start": 90.0, "end": 98.78, "text": "Okay, so Seventy percent of the twenty-twenty six data threat report respondents say that The speed of AI is their primary AI security concern." }, { "start": 99.68, "end": 100.18, "text": "Is it because?" }, { "start": 100.38, "end": 106.6, "text": "Adversarial use of AI as opening new attack vectors or could It be there is amplifying existing vulnerabilities?" }, { "start": 106.92, "end": 107.66, "text": "Scott will start with you." }, { "start": 108.38, "end": 127.28, "text": "yes Yes all of the above And worth note in the acceleration of AI-enabled attacks is that one of the findings we had at the data threat report, as you know Todd was Respondent's report on the greatest growth in AI and LLM based attacks." }, { "start": 127.7, "end": 130.02, "text": "Was those aimed at exposing sensitive data?" }, { "start": 130.4, "end": 133.74, "text": "So That's very much top of mind not just a functionality." }, { "start": 134.36, "end": 143.52, "text": "The functionality accelerates attacks both speed and scale and level of detail in terms of what they can discover about vulnerabilities, exposures on a target." }, { "start": 144.1, "end": 145.5, "text": "And how they could exploit those." }, { "start": 146.18, "end": 154.48, "text": "so all that comes together to concern organizations insensitive data is at the center their attention when it comes to How do we defend against this scale?" }, { "start": 156.44, "end": 158.5, "text": "Absolutely Scott I think you hit right on the head." }, { "start": 158.62, "end": 162.36, "text": "sensitive data Isis the core and underpins All these AI systems." }, { "start": 162.84, "end": 163.1, "text": "In terms." }, { "start": 163.14, "end": 165.38, "text": "have had the vulnerabilities shifted To your point?" }, { "start": 166.32, "end": 169.1, "text": "The same things we were always worried about before are still there." }, { "start": 169.64, "end": 170.4, "text": "And it's amazing." }, { "start": 170.46, "end": 181.72, "text": "what AI can find that we had forgotten about, and so I think to the part of question is... It is exposing existing vulnerabilities in just amplifying those two us but at other point as you mentioned Liz." }, { "start": 181.98, "end": 185.94, "text": "they know their are new attack surfaces coming." }, { "start": 186.18, "end": 188.34, "text": "its amazing with these agentic AI." }, { "start": 188.8, "end": 197.72, "text": "an amount agents our systems how quickly they could move throughout different parts of our organization and find just gaps." }, { "start": 198.04, "end": 206.3, "text": "And with the power that comes from the knowledge you can share at really an exponential scale, more new vulnerabilities are coming out." }, { "start": 206.34, "end": 207.82, "text": "but to protect against it don't get scared." }, { "start": 207.94, "end": 210.14, "text": "I think as your heading is there's ways to protect." }, { "start": 210.58, "end": 217.04, "text": "The existing sort of defenses do work to some extent But we have build new defences focusing on data." }, { "start": 217.08, "end": 218.12, "text": "come back to that point Scott." }, { "start": 218.18, "end": 222.06, "text": "It will be key understanding who accesses in their data why they're accessing what can we do?" }, { "start": 225.04, "end": 227.7, "text": "And agent AI can do great things for defenders as well, too." }, { "start": 227.8, "end": 237.28, "text": "It could reveal the things that need to be remediated but it's going to reveal them much more quickly at a larger scale than I think we've become used to and thats already problem For organizations." }, { "start": 237.78, "end": 248.32, "text": "in our surveys of security operations threat detection or response Organizations consistently report more then forty percent alerts they cannot address on a typical day In their security operation center." }, { "start": 248.78, "end": 253.38, "text": "That volume is going to explode with the explosion in agentic functionality." }, { "start": 254.16, "end": 257.04, "text": "But agents can be harnessed for good as well too." }, { "start": 257.74, "end": 262.52, "text": "They could assess the attack service, they find vulnerabilities and help remediate them." }, { "start": 262.56, "end": 263.98, "text": "we're still in early days of that." }, { "start": 264.6, "end": 277.6, "text": "We are exploring what is going on with agents but we are also exploring security issues around agent functionality these things that can reason make decisions act with a fair degree autonomy depending how their prompted." }, { "start": 279.72, "end": 285.7, "text": "so Those can all be really good things and people have found really advantageous uses for those in their everyday work." }, { "start": 286.66, "end": 293.1, "text": "Putting us to work from security is going to a definite plus, but putting them into the hands of the adversary gives the adversary leverage as well too." }, { "start": 293.28, "end": 295.56, "text": "so it's gonna interesting times over the next few years." }, { "start": 295.74, "end": 297.94, "text": "we're already seeing here at RSAC" }, { "start": 299.84, "end": 302.56, "text": "And just respond that because I think you are right." }, { "start": 303.12, "end": 305.72, "text": "i focused on negative first when thinking about agents." }, { "start": 308.0, "end": 308.96, "text": "But you're absolutely right, Scott." }, { "start": 309.38, "end": 315.36, "text": "Agents and all the power that they can harness is going to work for their good in terms of giving us an idea." }, { "start": 315.56, "end": 316.5, "text": "where are the vulnerabilities?" }, { "start": 316.64, "end": 317.98, "text": "And what?" }, { "start": 318.08, "end": 322.66, "text": "one element I'm kind a little bit off-face here we talk about at The Show." }, { "start": 322.98, "end": 327.82, "text": "it's just around quantum computing how AI really helps find." }, { "start": 328.24, "end": 333.48, "text": "where is weekend cryptography keys when a quantum computer does exist?" }, { "start": 334.4, "end": 337.74, "text": "you know, post quantum cryptography is gonna be a key way to defend against that." }, { "start": 337.98, "end": 353.64, "text": "And we wanna make sure the AI's helping us protect this against that quantum computer not team up with quantum computers and build this new superpower that actually finds holes for quantum computers to get into our data in really harvest now decrypt later but even more importantly break some of the protocols as signatures we already have." }, { "start": 353.78, "end": 356.44, "text": "so it's a fun world we live in isn't it?" }, { "start": 356.52, "end": 360.32, "text": "I gotta tell ya these" }, { "start": 360.4, "end": 363.92, "text": "days... Is it an Irish blessing that may you live in interesting times?" }, { "start": 367.46, "end": 372.06, "text": "They'll certainly be interested." }, { "start": 375.66, "end": 388.0, "text": "So effective data governance is the foundation of AI governance, however The Data Threat Report displays a worrying data governance gap lack of data visibility and lack of encryption across the data ecosystem." }, { "start": 388.74, "end": 391.62, "text": "What are the key reasons for these gaps and how can we resolve them?" }, { "start": 392.66, "end": 395.62, "text": "From our take, from talking to various CISOs or security professionals." }, { "start": 397.36, "end": 405.14, "text": "We do know that with our own report about unstructured data being created by AI, it's just unprecedented." }, { "start": 405.34, "end": 407.12, "text": "It is so much new data being made." }, { "start": 407.72, "end": 409.46, "text": "And its being littered all over the place." }, { "start": 410.04, "end": 426.08, "text": "Its going in cloud, its going into storage arrays, its gone on premise... I think what you used there was around visibility Liz And it's really having enough sensors to be able to find this new data and to be about a characterizing decide, you know what they want." }, { "start": 426.2, "end": 426.58, "text": "do with that." }, { "start": 426.9, "end": 428.72, "text": "I don't think there is not enough encryption employed." }, { "start": 428.8, "end": 430.5, "text": "i think he would have just the right amount of encryption." }, { "start": 430.58, "end": 433.3, "text": "but visibility and observability are really key." }, { "start": 433.6, "end": 438.22, "text": "if we can see which you dont now how could fix solution or provide an answer for problem?" }, { "start": 438.82, "end": 449.76, "text": "so as the tools get better more way to harness how we use AAI and where prompting responses go, in what agents can touch or cannot." }, { "start": 449.86, "end": 459.12, "text": "I think it will have a better idea of focusing on when that new data is most important for us And then once you've had the information We obviously know how to apply the controls." }, { "start": 459.38, "end": 461.02, "text": "So its tough problem." }, { "start": 462.38, "end": 467.72, "text": "One thing i'll mention from the data threat report metric i do recall There's only forty percent organization." }, { "start": 467.8, "end": 471.54, "text": "It was actually thirty nine percent organizations where all their data is." }, { "start": 471.76, "end": 476.08, "text": "And that's kind of scary, I mean it means...I don't know if that thirty-nine percent is telling the truth Scott?" }, { "start": 476.12, "end": 477.18, "text": "I don't what you think about that!" }, { "start": 477.24, "end": 478.86, "text": "That thing has probably less than that." }, { "start": 479.22, "end": 483.4, "text": "but still sixty percent of organizations at least have no idea." }, { "start": 483.48, "end": 484.46, "text": "we're all there datasets today." }, { "start": 485.64, "end": 494.5, "text": "It's a really tough problem because data is created constantly on endpoints in networks and datacenters and your right organization still help." }, { "start": 494.6, "end": 500.32, "text": "always had very good visibility into that off majority time according to findings in the report." }, { "start": 500.78, "end": 505.64, "text": "But it's interesting how many things lead back to data, data quality and data visibility?" }, { "start": 506.38, "end": 519.02, "text": "The most widely cited issue of the study as far as limiting AI adoption was poor data quality or poor initial data governance." }, { "start": 519.82, "end": 524.86, "text": "so response to that data threat reports see data being both beginning at end a lot." }, { "start": 525.92, "end": 530.06, "text": "They can't adopt AI the way that they want to because of poor data quality, poor data governance." }, { "start": 530.6, "end": 543.58, "text": "And that in turn means poor visibility into where data is how it's handled its integrity, its preservation use cases to which put authorized access and used modification about data content more widely?" }, { "start": 544.66, "end": 545.68, "text": "There are controls there." }, { "start": 545.72, "end": 546.62, "text": "very good controls." }, { "start": 546.68, "end": 553.66, "text": "cryptographic controls on beta have evolved considerably over a couple generations just in human" }, { "start": 553.74, "end": 554.5, "text": "terms now." }, { "start": 555.54, "end": 558.0, "text": "But people have tools all over the place." }, { "start": 558.56, "end": 567.18, "text": "on eighty three percent of respondents to data threat report Sighted a perceived lack of compatibility or capability across their tools with each other." }, { "start": 568.16, "end": 573.24, "text": "Only thirty six percent of respondents are confident in they're understanding Of their data security." }, { "start": 573.84, "end": 575.74, "text": "so there's a lot of tool sprawl." }, { "start": 575.9, "end": 577.4, "text": "They come from a lot riders." }, { "start": 578.58, "end": 580.66, "text": "It's interesting that TALIS has an approach to consistency." }, { "start": 580.76, "end": 588.26, "text": "That just because all the domains it cup if your data security products, encryption and key management as well too." }, { "start": 588.88, "end": 597.08, "text": "But most organizations don't have anywhere near that approach to consistency in how they're managing data security and the tools to assure data security like" }, { "start": 597.12, "end": 597.58, "text": "encryption." }, { "start": 597.66, "end": 597.74, "text": "so" }, { "start": 598.24, "end": 600.94, "text": "organization still has a long ways together?" }, { "start": 601.56, "end": 605.64, "text": "I think one of things you mentioned there and I skipped over little bit about the encryption." }, { "start": 605.72, "end": 609.12, "text": "it isn't very important control when it comes to protecting information." }, { "start": 609.16, "end": 612.34, "text": "then there's tokenization other types protection and data masking." }, { "start": 612.84, "end": 617.86, "text": "but What I find talking to folks is it's kind of a maturity cycle, right?" }, { "start": 617.9, "end": 619.34, "text": "You mentioned the visibility observability." }, { "start": 619.96, "end": 625.82, "text": "Finding all that critical data and having those sensors tell you where its at And then understanding the risk around it." }, { "start": 626.46, "end": 628.3, "text": "Unfortunately a lot of organizations stop there." }, { "start": 628.72, "end": 631.22, "text": "They don't take that encryption or data protection step." }, { "start": 631.34, "end": 633.3, "text": "That what we're finding from a Talus perspective." }, { "start": 633.4, "end": 634.52, "text": "We really truly believe." }, { "start": 634.96, "end": 642.34, "text": "if your gonna call yourself a DSPM company Data Security Posture Management If your going to call yourselves a Visibility Company You've got to have that mediation, the next step." }, { "start": 643.4, "end": 647.04, "text": "Visibility is so important and risk assessment are so important in finding critical data." }, { "start": 647.32, "end": 660.28, "text": "but please if it's critical for you tokenize it, encrypt it make it hard for AI and AIA agents get access or even other machines because otherwise we really aren't putting your data at jeopardy." }, { "start": 660.58, "end": 661.02, "text": "be lost." }, { "start": 661.46, "end": 664.22, "text": "One of the key things about agentic AI." }, { "start": 664.28, "end": 679.82, "text": "adoption here has been increased production output when it comes to operational management tools, increased production of analytics and increased production observability data which is just more data that teams have to deal with." }, { "start": 679.88, "end": 681.34, "text": "When It comes to addressing the problem." }, { "start": 681.86, "end": 690.88, "text": "all this documentation also visibility into the problems And not nearly enough emphasis on resolution remediation and dealing with the problem dissolving the problems." }, { "start": 690.96, "end": 693.84, "text": "click there are we expect." }, { "start": 693.92, "end": 701.4, "text": "you know after This year's RSAC we expect future years to see more about remediation and resolution of problems, leveraging agentic technology." }, { "start": 701.58, "end": 701.9, "text": "do that." }, { "start": 702.72, "end": 705.56, "text": "But in the meantime surfacing all this data just creates more." }, { "start": 705.7, "end": 716.14, "text": "I mean you said it yourself a few minutes ago but organizations don't... You know there's so much data they can get into their monetary environment let alone deal with remediation from these respects." }, { "start": 716.78, "end": 729.06, "text": "So as agentic functionality increases our visibility or action ability what we see in monitoring and discovering and data management processes, the remediation aspect of that is going to have to follow." }, { "start": 729.2, "end": 731.6, "text": "That's what we're gonna expect this coming years at this conference." }, { "start": 733.78, "end": 734.92, "text": "We are seeing a trend there as well too." }, { "start": 734.96, "end": 736.0, "text": "I'm curious Scott would you think?" }, { "start": 737.26, "end": 759.94, "text": "If you think about it A lot times when you get visibility You understand whats wrong And then theres manual process to encrypt or add those data protection controls Whatever methods your using mechanism What were seen being asked pulled from us by our customers Is given number of agents and the number of agents in our systems, and a number interactions that we've got to get more into this automatic remediation." }, { "start": 760.06, "end": 764.42, "text": "It's gotta be orchestrated, it's gonna be active or automatic is gotta be proactive." }, { "start": 764.92, "end": 776.3, "text": "And you know I think years ago being at RSA there was such pushback from any sort automation when they came through that remediation piece because everyone so scared your going break my downstream system by putting out place." }, { "start": 776.7, "end": 781.2, "text": "but if ya think about how AI are just data in general once its leaks Its Out There!" }, { "start": 781.72, "end": 784.72, "text": "So I think if i was a CISO,I'd think about it." }, { "start": 784.76, "end": 791.96, "text": "You know would I rather stop and break maybe something downstream but protect something really critical to my organization or Would I let It go out?" }, { "start": 792.02, "end": 792.8, "text": "And hope for the best?" }, { "start": 793.32, "end": 795.08, "text": "so I do Think that we're going To hear A lot more." }, { "start": 795.22, "end": 795.98, "text": "appreciate you saying That." }, { "start": 796.02, "end": 798.58, "text": "More About proactive Or automatic Remedy?" }, { "start": 799.06, "end": 799.46, "text": "I think what you said." }, { "start": 799.5, "end": 801.76, "text": "you're gonna Hear More About remediation here at The conference." }, { "start": 801.8, "end": 805.46, "text": "I don't Know What you think More About that Proactive Automatic Based on Your Policies." }, { "start": 806.46, "end": 807.32, "text": "Absolutely Necessary." }, { "start": 808.34, "end": 811.6, "text": "We tend to Think of that as closed Loop A Closed Loop Approach to Security." }, { "start": 812.36, "end": 813.44, "text": "They can't be completely closed." }, { "start": 813.48, "end": 818.82, "text": "It has to continue take inputs, it has to open up continuous improvement and quality assurance." }, { "start": 819.58, "end": 830.7, "text": "so we've seen approaches for agents that could do red teaming or blue teaming on the defensive side some introducing remediation functionality as well too." }, { "start": 830.78, "end": 835.62, "text": "but there still have been added steps making sure its going perform as expected." }, { "start": 840.94, "end": 853.82, "text": "We've already had some incidents of how service providers inadvertently deleting, to some customers were probably critical functionality in the course of remediating an issue that was discovered with agents." }, { "start": 854.36, "end": 860.8, "text": "Agents put work under remediation so we have visibility into what they're doing as well too and that they perform as expected." }, { "start": 860.88, "end": 862.18, "text": "So interesting future." }, { "start": 862.36, "end": 872.0, "text": "I mean The potential is really there in the not too distant future, and this space is moving incredibly fast." }, { "start": 873.58, "end": 885.96, "text": "My gosh last year at RSA agent was just a twink when everyone's eye you know I mean i went to some presentations and people were just kind of guessing what the future is and...I don't know about you Scott but.. I've actually created an agent myself!" }, { "start": 886.16, "end": 886.86, "text": "And had it do work?" }, { "start": 887.86, "end": 890.68, "text": "It's powerful its kinda fun Its kinda cool ya'know." }, { "start": 890.84, "end": 894.22, "text": "But um yeah I think that time is now." }, { "start": 895.0, "end": 895.64, "text": "It really happening." }, { "start": 896.88, "end": 900.22, "text": "You've seen the reaction investors and I think some of those are firsthand experiences." }, { "start": 925.16, "end": 928.52, "text": "co-working, copilating agents however you want to think of those." }, { "start": 929.02, "end": 936.16, "text": "To work on the problem and through a few iterations within couple hours I had a pretty complete inventory what i was looking for And then it's just in an evening." }, { "start": 937.08, "end": 939.54, "text": "so The promise is just astonishing." }, { "start": 940.6, "end": 941.8, "text": "So we've talked about encryption." }, { "start": 941.9, "end": 947.58, "text": "so given this central importance of encryption today to data security strategies How prepared are we?" }, { "start": 947.7, "end": 949.8, "text": "For the threat that quantum computing poses?" }, { "start": 949.88, "end": 951.42, "text": "two encrypted data today" }, { "start": 952.24, "end": 954.8, "text": "It's...so have to lay out the problems little bit." }, { "start": 955.48, "end": 968.14, "text": "Quantum computing is fundamentally probabilistic, which means that if you can harness probabilistic algorithms on a problem then it can iterate through probabilities several of them simultaneous." }, { "start": 968.58, "end": 972.84, "text": "So what had been historically linear sequential like a Monte Carlo type analysis?" }, { "start": 973.94, "end": 986.28, "text": "many those analyses could be done simultaneously by quantum computing just by virtue the fact about other quantum states that basic building blocks physical reality, how they respond in those kind of situations." }, { "start": 986.84, "end": 991.12, "text": "And it greatly accelerates the ability to solve problems based on that probabilistic approach." }, { "start": 992.06, "end": 998.28, "text": "as It turns out In cryptography there does exist an algorithm more than one action for doing that analysis." }, { "start": 998.34, "end": 1015.88, "text": "if things like public-private encryption key pairs and The ability to iterate through those and what had been in past a classically improbable infeasible way To break those keys through brute force doing a linear iteration through every possible combination, factors for those keys." }, { "start": 1016.96, "end": 1023.44, "text": "Many of them can be done simultaneously by these kind of algorithms and patterns could be recognized in those assessments." }, { "start": 1024.079, "end": 1030.18, "text": "Recognition that this pattern accelerates the discovery of keys far faster than was even possible with classical computing." }, { "start": 1030.42, "end": 1038.98, "text": "A lot of cryptography public key cryptography particular is dependent on the infeasibility of classical computing to factor those keys." }, { "start": 1039.04, "end": 1040.94, "text": "it's just not theoretically possible." }, { "start": 1040.98, "end": 1055.46, "text": "my brute force Quantum algorithms greatly accelerate that, which means the risk of exposing public keys that exist today goes up very fast compared to classical computing." }, { "start": 1056.02, "end": 1056.84, "text": "So this is a risk." }, { "start": 1056.92, "end": 1067.94, "text": "A lot of encrypted data and data that's encrypted using public key photography as part of the means for encryption... That data is at risk because of potential discovery of those keys." }, { "start": 1068.0, "end": 1078.68, "text": "so thats what we're facing in terms going forward, so we are basically in an arms race against those with competent quantum computing able to discover these keys." }, { "start": 1078.74, "end": 1099.1, "text": "Now the good news at this point is that it's not yet feasible for todays' quantum computers but great advancements being made their capability areas such as error correction when you're looking at a state of photons from one stage or another its just packet light if your thinking about which means very susceptible Errors to noise and the environment." }, { "start": 1099.16, "end": 1108.82, "text": "so correcting those errors in quantum computers can greatly accelerate their ability To attack quantum problems including discovery of how it came a public encryption." }, { "start": 1109.92, "end": 1111.4, "text": "So that's the arms race." }, { "start": 1111.44, "end": 1112.88, "text": "That we're up against this time." }, { "start": 1113.22, "end": 1120.94, "text": "But advancements are being made in parallel with advancements in quantum computing, so We have a shot at being prepared for the post-quantum world." }, { "start": 1120.98, "end": 1122.94, "text": "me And you have visibility directly into that Tom" }, { "start": 1123.78, "end": 1123.92, "text": "yeah?" }, { "start": 1124.0, "end": 1126.86, "text": "Yeah no um That was a really good description." }, { "start": 1126.94, "end": 1131.54, "text": "Scott, I got to tell you that's one of the best descriptions I've heard about problems when we're faced with it." }, { "start": 1131.58, "end": 1134.64, "text": "Maybe i'll focus more on how can counter that A little bit." }, { "start": 1135.18, "end": 1135.88, "text": "The problem is there." }, { "start": 1136.42, "end": 1143.46, "text": "We don't know time frame When stability and we get to this point But its big enough for potential issue." }, { "start": 1143.52, "end": 1147.46, "text": "And theres good sides to quantum All those physics we just talked about solving these problems." }, { "start": 1147.64, "end": 1155.62, "text": "There are positive side as said earlier in our podcast but also negative side of breaking asymmetric photography key cryptography." }, { "start": 1156.06, "end": 1170.58, "text": "I think that the standards bodies around the world have taken notice, it's impressive that we do have algorithms already available to us to counter this attack and we also have regulations that say by twenty thirty-five here in the" }, { "start": 1170.66, "end": 1170.96, "text": "U.S.," }, { "start": 1171.1, "end": 1173.94, "text": "NISTAS said you know ramp deprecate some of those existing algorithms." }, { "start": 1174.2, "end": 1184.58, "text": "so there is another arm race or another race going on right now is twenty three five nine years away sort of impressed by." }, { "start": 1184.76, "end": 1191.58, "text": "the show is three years ago when we first started talking about, you know PQC, post-photography, quantum computers." }, { "start": 1192.0, "end": 1194.22, "text": "People would roll their eyes and got so much interest." }, { "start": 1194.64, "end": 1198.62, "text": "We're seeing a lot of questions I think in every one on my customer interactions here." }, { "start": 1199.0, "end": 1200.42, "text": "There's questions about what can we do now?" }, { "start": 1200.64, "end": 1205.48, "text": "How do i discover how to understand where I'm going To be at risk with threat And start implementing?" }, { "start": 1205.54, "end": 1209.64, "text": "and I think we have A lot to Do In your next end...I guess it's funny." }, { "start": 1209.72, "end": 1218.8, "text": "You Know The regulated industries are ahead Of others And regionally, I think Asia-Pacific actually is more concerned than the US in some aspects." }, { "start": 1218.88, "end": 1219.38, "text": "I've seen U.S." }, { "start": 1219.44, "end": 1221.86, "text": "government and U. S financials get really ahead of it." }, { "start": 1221.92, "end": 1228.22, "text": "regulated industries but i would say APAC very much trying to figure out what they're going need do be prepared." }, { "start": 1228.32, "end": 1229.66, "text": "Europe's right there behind them." }, { "start": 1229.78, "end": 1229.84, "text": "so" }, { "start": 1230.34, "end": 1230.54, "text": "a lot." }, { "start": 1230.58, "end": 1230.72, "text": "have" }, { "start": 1231.74, "end": 1232.18, "text": "good energy." }, { "start": 1232.6, "end": 1234.54, "text": "that area again news as we had." }, { "start": 1235.06, "end": 1238.02, "text": "you know solution here needed implemented and guess." }, { "start": 1238.1, "end": 1241.06, "text": "my last point is crypto agility And I don't know if you hear that, Scott." }, { "start": 1241.1, "end": 1246.64, "text": "I'm curious when you're talking to people but the algorithms up today most likely will change." }, { "start": 1247.08, "end": 1248.82, "text": "We talked about AI and post-quantum." }, { "start": 1249.22, "end": 1249.8, "text": "It's a good chance." }, { "start": 1249.84, "end": 1253.8, "text": "there are going to be deficiencies found in some of these algorithms we didn't even know yet." }, { "start": 1253.92, "end": 1255.88, "text": "So new algorithm is gonna be invented." }, { "start": 1256.4, "end": 1259.96, "text": "so make sure our systems can quickly deploy those algorithms to protect." }, { "start": 1260.06, "end": 1262.24, "text": "But this one was exciting." }, { "start": 1262.88, "end": 1263.48, "text": "You just never knew." }, { "start": 1263.88, "end": 1264.22, "text": "I mean jeez." }, { "start": 1264.26, "end": 1265.84, "text": "i am trying think of it as a good metaphor." }, { "start": 1266.3, "end": 1271.32, "text": "The quantum computer could arrive Two years from now could be two months." }, { "start": 1271.7, "end": 1273.06, "text": "I mean, who knows?" }, { "start": 1273.7, "end": 1274.84, "text": "And we need to get prepared." }, { "start": 1275.5, "end": 1282.26, "text": "this is a field where innovation completely upset timelines and expectations that you know." }, { "start": 1282.48, "end": 1284.14, "text": "peter shore doesn't come around every day." }, { "start": 1284.72, "end": 1289.56, "text": "the inventor one of the better known algorithms for attacking conventionally." }, { "start": 1291.92, "end": 1294.78, "text": "so the pace of innovation was really pretty." }, { "start": 1295.44, "end": 1297.4, "text": "it's astonishing how fast things are changing." }, { "start": 1297.5, "end": 1301.74, "text": "I mean, you hear some of the proofs and concepts around things like improved error correction." }, { "start": 1301.78, "end": 1302.36, "text": "And so it was well." }, { "start": 1302.42, "end": 1303.26, "text": "now we can crack key." }, { "start": 1303.48, "end": 1310.1, "text": "maybe how remaining digits is not very long or big key compared to a size that practically used." }, { "start": 1310.7, "end": 1318.88, "text": "encryption fees today which are quite large numbers were talking about which are virtually impossible factor with classical computer." }, { "start": 1319.78, "end": 1322.36, "text": "but any changes in advance miss me ability." }, { "start": 1327.1, "end": 1336.1, "text": "quantum computing really is just a factor of the innovators in the field that can come up with new ideas and how they could apply them to this particular opportunity." }, { "start": 1337.24, "end": 1350.32, "text": "We're nine years out, we think at this point from a feasible approach having to require post-quantum encryption but that could change depending on the pace of innovation in the quantum computing field." }, { "start": 1357.06, "end": 1366.14, "text": "difficult to discover and ascertain, but now we have AI working on problems that humans could not even conceive of solving." }, { "start": 1366.62, "end": 1379.24, "text": "Not that long ago so for all that a quantum computing can do to parallelize And increase the amount of horsepower if you will apply to things like key encryption." }, { "start": 1379.72, "end": 1392.84, "text": "We had that same sort of technology applied discovery fundamental Fundamental principles in nature that could be applied and quantum computing to accelerate what can be done with these innovations." }, { "start": 1393.5, "end": 1398.78, "text": "So it's really exciting times all the way around, I expect to see a lot more about quantum computing as well too." }, { "start": 1398.9, "end": 1402.44, "text": "if you maybe few RSAs down the road but It's happening already." }, { "start": 1403.88, "end": 1409.24, "text": "Maybe we should reconvene in RSA conference twenty thirty five and revisit this conversation and see where we've come." }, { "start": 1410.52, "end": 1410.98, "text": "Happy to do." }, { "start": 1411.66, "end": 1411.94, "text": "We'll be here." }, { "start": 1411.98, "end": 1412.24, "text": "Next year" }, { "start": 1412.32, "end": 1416.9, "text": "first, but obviously in twenty-twenty... twenty thirty five as well too Scottie!" }, { "start": 1419.64, "end": 1421.08, "text": "Remember if you like what you hear." }, { "start": 1421.2, "end": 1434.14, "text": "Be sure to subscribe and tell a friend or colleague Or a client about the Tallis Security Sessions podcast series Not just for next one But our collection of highly useful And always relevant conversations." }, { "start": 1435.26, "end": 1443.64, "text": "We will be back again soon with another episode and discussion on the topics you need to know about, to successfully carry-on in the business of information security." }, { "start": 1445.12, "end": 1446.94, "text": "Until then... On behalf of Liz Kelly." }, { "start": 1447.74, "end": 1448.64, "text": "I'm Steve Prentice." }, { "start": 1449.56, "end": 1450.8, "text": "Thanks for listening." } ]