AI Guardian Cheatsheet
AI Guardian Cheatsheet¶
Overview¶
AI Guardian from Cyera is a solution designed to secure any type of AI. It expands Cyera’s platform to meet the needs of enterprises adopting AI, and is powered by two products: AI-SPM, for providing an inventory of all AI assets, and AI Runtime Protection, for monitoring and responding to AI data risks in real-time.
Key Features¶
- AI-SPM (AI Security Posture Management): Provides a comprehensive inventory of all your AI assets, including models, applications, and data.
- AI Runtime Protection: Monitors your AI systems in real-time and responds to data risks as they happen.
- Data-Centric Security: Focuses on protecting the data that your AI systems use and generate.
- Enterprise-Ready: Designed to meet the security and compliance needs of large organizations.
Getting Started¶
- Deploy the Cyera platform: Install and configure the Cyera platform in your environment.
- Connect your AI systems: Connect your AI models, applications, and data sources to AI Guardian.
- Discover your AI assets: Use AI-SPM to discover and inventory all of your AI assets.
- Configure your security policies: Define the security policies that you want to enforce on your AI systems.
- Monitor for risks: Use AI Runtime Protection to monitor your AI systems for data risks and respond to them in real-time.
Common Commands¶
While AI Guardian is primarily UI-driven, here are some conceptual commands that represent the actions you would take within the platform:
cyera discover --type ai: Discover all of the AI assets in your environment.cyera policy create --name "PII Detection" --condition "data.contains("pii")" --action alert: Create a new security policy to detect and alert on the use of personally identifiable information (PII) in your AI systems.cyera risks list --status open: View all of the open data risks that have been identified in your AI systems.cyera report generate --type compliance: Generate a compliance report to demonstrate that your AI systems are meeting your security and regulatory requirements.
Example Use Case¶
Scenario: A financial services company is using an AI-powered chatbot to provide customer support.
- Discover AI Assets: The company uses AI-SPM to discover the chatbot, the AI model that powers it, and the customer data that it uses.
- Configure Security Policies: They create a security policy that prevents the chatbot from accessing or storing any sensitive customer data, such as credit card numbers or social security numbers.
- Monitor for Risks: AI Runtime Protection monitors the chatbot in real-time and alerts the security team if it ever attempts to access or store sensitive data.
- Respond to Incidents: If an incident occurs, the security team can use AI Guardian to investigate the incident, understand the root cause, and take corrective action.