AI leaders are prioritizing agent registries, identity management and zero trust to secure the rise of agentic AI.<\/p>\n
Marine Corps AI Lead Christopher Clark said at GovCIO Media & Research\u2019s Federal AI Forum<\/a> that participants in the recently announced Marine Corps AI Hackathon<\/a> will help create a registry of AI agents to monitor and audit their use and ensure compliance.<\/p>\n \u201cIdeally with this registry we\u2019ll reduce the number of agents that are out there and track and understand who has what and who\u2019s using it,\u201d said Clark. \u201cThere\u2019s still a lot more work we need to do, especially with identity and identity management, but with this hackathon we can develop the best product and start using the registry by the end of this year.\u201d<\/p>\n Clark said agentic AI has lowered the barrier to entry for Marines interested in coding who may lack prior or in-depth coding experience. He added that AI standards have not changed, but keeping pace with the growing number of agents requires an increased focus on governance efforts.<\/p>\n \u201cMarines couldn\u2019t build these tools before, and now they\u2019re building tools that can scrape their email. The agent has access to everything the Marine has access to,\u201d said Clark. \u201cWe need to figure out how to rein that in, make sure we govern it so whatever we build isn\u2019t also compromising something.\u201d<\/p>\n FileVine Federal Managing Director Will Erb echoed Clark, adding that agents should be treated as potential bad actors within systems. Erb said agents and their users may not intend to do anything wrong, but poorly configured agents can still pose a threat to systems.<\/p>\n \u201cIf you provide that kind of power to folks that don\u2019t exactly know how to structure it, or catch the issue before it gets deep into your systems, you end up having what is effectively an adverse actor inside your system,\u201d said Erb. \u201cIf I\u2019m not constructing the boundary around my agent the right way, what it can do can become incredibly pervasive and incredibly negative so it has to be centralized.\u201d<\/p>\n Assigning and managing identities are crucial for organizations to monitor agents\u2019 access and determine which users the agents are acting on behalf of. Mallory Sword Glenn, director of AI product marketing at Okta, said current verification and validation for AI agents is weak because agents often lack valid, unique identities.<\/p>\n She added that visibility into what agents are doing and why, along with auditing that activity, could help organizations determine whether future incidents stem from bad actors, misconfigured agents or other causes.<\/p>\n \u201cWe can\u2019t send an AI agent to jail for doing something that it shouldn\u2019t have,\u201d said Sword Glenn. \u201cThis becomes even more critical as we have agents spawning other agents. You need to see for every hop in that chain, which agent was doing it and who was the human behind it.\u201d<\/p>\n Rafael Ferreira da Silva, section head of data and AI at Oak Ridge National Laboratory\u2019s <\/a>Computer Science and Mathematics Division, said trust and visibility are also playing a role in how national laboratories share information as they collaborate on the Genesis Mission. Organizations participating in the Genesis Mission are working together<\/a> to build a platform of datasets and algorithms that scientists can access via single sign-on and use to advance research on select challenges.<\/p>\n Ferreira da Silva said understanding how data and agents interact at a granular level, a practice known as data provenance, is helping build trust among scientists sharing highly sensitive data with agents. Data provenance, which tracks an agent\u2019s data, metadata and other task information from start to finish, can help hold agents accountable by providing a foundational layer of visibility.<\/p>\n \u201cWe need to understand the entire chain of an agent and do a kind of a root cause analysis to understand and find out how you could have prevented that,\u201d said Ferreira da Silva. \u201cAnd this is a way more complex problem now in an environment where agents are interacting with each other, and then you need to understand what might cause those interactions.\u201d<\/p>\n Clark said it is important to understand the vulnerabilities agentic AI poses \u2014 and, on the flip side, the myriad vulnerabilities being identified with the help of frontier AI models from industry \u2014 but the volume can be overwhelming. Focusing on cybersecurity fundamentals can help ground leaders as they navigate the technology\u2019s growing security implications, he added.<\/p>\n \u201cI think we really just need to get back to basic cyber principles. We already have to prioritize and address the most concerning risks and there\u2019s a good chance we\u2019re going to get overwhelmed with the amount of vulnerabilities we identify,\u201d said Clark. \u201cI think what we can do most effectively is really focusing on the basic principles like zero trust<\/a> so that we can quickly identify when something is in our system.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"AI leaders are prioritizing agent registries, identity management and zero trust to secure the rise of agentic AI.…\n","protected":false},"author":2,"featured_media":140803,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[179,7493,1798,61605,7486,57476,9578],"class_list":["post-140802","post","type-post","status-publish","format-standard","has-post-thumbnail","category-agentic-ai","tag-agentic-ai","tag-agentic-artificial-intelligence","tag-ai-governance","tag-doe","tag-marine-corps","tag-national-labs","tag-zero-trust"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/140802","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/comments?post=140802"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/140802\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media\/140803"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media?parent=140802"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/categories?post=140802"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/tags?post=140802"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}