Aaron Levie: Autonomous agents end security through obscurity
Box CEO Aaron Levie believes that security through obscurity has completely failed in the face of autonomous agents—such systems will search every crevice and try every permutation of attacks. He expects a large amount of legacy enterprise infrastructure will need upgrading, with security practices, data pipelines, and access controls all needing modernization; agents can accelerate this work on the defense side and simulate risk vectors. He also says this is part of the reason the diffusion model timeline will be longer than some people expect.
View original posta lot of old software was protected by “exploiting this would be an unreasonable amount of work” we have invented a machine that does unreasonable amounts of work anyway how’s the patch backlog
View original
a lot of old software was protected by “exploiting this would be an unreasonable amount of work” we have invented a machine that does unreasonable amounts of work anyway how’s the patch backlog
Body
Any form of security through obscurity is fully over. This barely worked as a method with humans, but just simply is over in a world of autonomous systems that will look through every crevice and try every permutation of attack possible.
As a result, years and years of legacy enterprise infrastructure will need to be upgraded, security practices modernized, data pipelines cleaned up, access controls better managed, and much more. Agents will help on the defensive side because they can both accelerate this work and equally simulate the risk vectors.
But there’s a long road ahead to prepare for this future. This is also partially why diffusion timelines will take longer than some realize.