Active Cyber Zone from ActiveCyber.net

Chris Daly of Active Cyber
  • 0.0 (0)
  • Tech News

Chris Daly podcast on security topics and other emerging topics

  1. 4d ago

    Securing the Fusion of Quantum and Agentic AI: Episode 2 - Zero Trust Meets the Threat Model

    Send us Fan Mail This is Episode 2 of a six-part podcast series based on the post Securing the Fusion of Quantum and Agentic AI that can be found at the website listed below.  The series discusses the convergence of quantum computing and agentic artificial intelligence. It notes how the convergence creates a security problem that cannot be solved by treating quantum readiness, AI security, and Zero Trust as separate initiatives. Quantum computing places pressure on public-key cryptography used to authenticate identities, establish keys, sign software, and protect long-lived information. Agentic AI expands the number and speed of security-relevant actions: agents select tools, access data, call APIs, generate artifacts, delegate subtasks, and initiate workflows with limited human intervention. Quantum-computing services add a specialized execution domain in which job submission, compilation, orchestration, hardware control, facility systems, and research results must be separated and governed. This series synthesizes three related treatments: an integrated quantum-agentic enterprise architecture; the effect of quantum risk on Zero Trust; and a Zero Trust reference design for quantum-computing infrastructure. It proposes a unified, resource-centric architecture in which every user, agent, workload, job, tool call, dataset, privileged operation, and quantum-service transition is explicitly authenticated, authorized, constrained, logged, and reassessed. Post-quantum cryptography (PQC), cryptographic discovery, crypto-agility, protected key management, software provenance, workload isolation, attestation, and continuous assurance underpin—but do not replace—policy enforcement. The central conclusion is that Zero Trust remains applicable, but its implementation must expand beyond human-and-device access to include autonomous delegation, model-influenced actions, quantum-job lifecycles, hardware-management boundaries, and the durability of cryptographic evidence.  Check out the article or interview at www.activecyber.net

  2. 5d ago

    Securing the Fusion of Quantum and Agentic AI: Episode 1 - Two Transitions, One Problem

    Send us Fan Mail This is Episode 1 of a six-part podcast series based on the post Securing the Fusion of Quantum and Agentic AI that can be found at the website listed below.  The series discusses the convergence of quantum computing and agentic artificial intelligence. It notes how the convergence creates a security problem that cannot be solved by treating quantum readiness, AI security, and Zero Trust as separate initiatives. Quantum computing places pressure on public-key cryptography used to authenticate identities, establish keys, sign software, and protect long-lived information. Agentic AI expands the number and speed of security-relevant actions: agents select tools, access data, call APIs, generate artifacts, delegate subtasks, and initiate workflows with limited human intervention. Quantum-computing services add a specialized execution domain in which job submission, compilation, orchestration, hardware control, facility systems, and research results must be separated and governed. This series synthesizes three related treatments: an integrated quantum-agentic enterprise architecture; the effect of quantum risk on Zero Trust; and a Zero Trust reference design for quantum-computing infrastructure. It proposes a unified, resource-centric architecture in which every user, agent, workload, job, tool call, dataset, privileged operation, and quantum-service transition is explicitly authenticated, authorized, constrained, logged, and reassessed. Post-quantum cryptography (PQC), cryptographic discovery, crypto-agility, protected key management, software provenance, workload isolation, attestation, and continuous assurance underpin—but do not replace—policy enforcement. The central conclusion is that Zero Trust remains applicable, but its implementation must expand beyond human-and-device access to include autonomous delegation, model-influenced actions, quantum-job lifecycles, hardware-management boundaries, and the durability of cryptographic evidence.  Check out the article or interview at www.activecyber.net

  3. Oct 13

    Securing the Agentic AI Revolution: Episode 6 — Building the Secure Agentic Infrastructure, From Agent Registration to Autonomous Operations

    Send us Fan Mail This 6-part podcast series describes a Defense-in-Depth Security Architecture for Agentic AI based on the principle of bounded autonomy. The architecture defines 10 layers - governance, identity, authorization, agent guardrails, runtime security, model and tool protection, confidential computing, infrastructure security, continuous validation, and security operations. It also includes 3 cross-cutting layers - enterprise agent control plane, security telemetry and observability, and human oversight and accountability. A critical distinction between identity-based trust—knowing which agent is acting—and execution-based trust—knowing what software and hardware environment is actually executing the agent is also presented. Confidential Computing and Trusted Execution Environments (TEEs) provide an important foundation for the latter through hardware-backed isolation and remote attestation. The podcast maps this architecture to an emerging ecosystem of commercial and open-source technologies. The analysis identifies areas in which the market is rapidly developing as well as persistent architectural gaps, particularly around agent-to-agent trust, memory integrity, execution provenance, and the relationship between identity and attested runtime state. Check out the article or interview at www.activecyber.net

  4. Oct 9

    Securing the Agentic AI Revolution: Episode 5 — The Three Control Planes: Governing, Observing, and Controlling Autonomous AI

    Send us Fan Mail This 6-part podcast series describes a Defense-in-Depth Security Architecture for Agentic AI based on the principle of bounded autonomy. The architecture defines 10 layers - governance, identity, authorization, agent guardrails, runtime security, model and tool protection, confidential computing, infrastructure security, continuous validation, and security operations. It also includes 3 cross-cutting layers - enterprise agent control plane, security telemetry and observability, and human oversight and accountability. A critical distinction between identity-based trust—knowing which agent is acting—and execution-based trust—knowing what software and hardware environment is actually executing the agent is also presented. Confidential Computing and Trusted Execution Environments (TEEs) provide an important foundation for the latter through hardware-backed isolation and remote attestation. The podcast maps this architecture to an emerging ecosystem of commercial and open-source technologies. The analysis identifies areas in which the market is rapidly developing as well as persistent architectural gaps, particularly around agent-to-agent trust, memory integrity, execution provenance, and the relationship between identity and attested runtime state. Check out the article or interview at www.activecyber.net

  5. Oct 7

    Securing the Agentic AI Revolution: Episode 4 — Runtime, Tools, Memory and Agent-to-Agent Security

    Send us Fan Mail This 6-part podcast series describes a Defense-in-Depth Security Architecture for Agentic AI based on the principle of bounded autonomy. The architecture defines 10 layers - governance, identity, authorization, agent guardrails, runtime security, model and tool protection, confidential computing, infrastructure security, continuous validation, and security operations. It also includes 3 cross-cutting layers - enterprise agent control plane, security telemetry and observability, and human oversight and accountability. A critical distinction between identity-based trust—knowing which agent is acting—and execution-based trust—knowing what software and hardware environment is actually executing the agent is also presented. Confidential Computing and Trusted Execution Environments (TEEs) provide an important foundation for the latter through hardware-backed isolation and remote attestation. The podcast maps this architecture to an emerging ecosystem of commercial and open-source technologies. The analysis identifies areas in which the market is rapidly developing as well as persistent architectural gaps, particularly around agent-to-agent trust, memory integrity, execution provenance, and the relationship between identity and attested runtime state. Check out the article or interview at www.activecyber.net

  6. Oct 2

    Securing the Agentic AI Revolution: Episode 3 — Confidential Computing: Establishing Trust in Agent Execution

    Send us Fan Mail This 6-part podcast series describes a Defense-in-Depth Security Architecture for Agentic AI based on the principle of bounded autonomy. The architecture defines 10 layers - governance, identity, authorization, agent guardrails, runtime security, model and tool protection, confidential computing, infrastructure security, continuous validation, and security operations. It also includes 3 cross-cutting layers - enterprise agent control plane, security telemetry and observability, and human oversight and accountability. A critical distinction between identity-based trust—knowing which agent is acting—and execution-based trust—knowing what software and hardware environment is actually executing the agent is also presented. Confidential Computing and Trusted Execution Environments (TEEs) provide an important foundation for the latter through hardware-backed isolation and remote attestation. The podcast maps this architecture to an emerging ecosystem of commercial and open-source technologies. The analysis identifies areas in which the market is rapidly developing as well as persistent architectural gaps, particularly around agent-to-agent trust, memory integrity, execution provenance, and the relationship between identity and attested runtime state. Check out the article or interview at www.activecyber.net

  7. Oct 1

    Securing the Agentic AI Revolution: Episode 2 - The Secure Agent Reference Architecture

    Send us Fan Mail This 6-part podcast series describes a Defense-in-Depth Security Architecture for Agentic AI based on the principle of bounded autonomy. The architecture defines 10 layers - governance, identity, authorization, agent guardrails, runtime security, model and tool protection, confidential computing, infrastructure security, continuous validation, and security operations. It also includes 3 cross-cutting layers - enterprise agent control plane, security telemetry and observability, and human oversight and accountability. A critical distinction between identity-based trust—knowing which agent is acting—and execution-based trust—knowing what software and hardware environment is actually executing the agent is also presented. Confidential Computing and Trusted Execution Environments (TEEs) provide an important foundation for the latter through hardware-backed isolation and remote attestation. The podcast maps this architecture to an emerging ecosystem of commercial and open-source technologies. The analysis identifies areas in which the market is rapidly developing as well as persistent architectural gaps, particularly around agent-to-agent trust, memory integrity, execution provenance, and the relationship between identity and attested runtime state. Check out the article or interview at www.activecyber.net

  8. Sep 28

    Securing the Agentic AI Revolution - Episode 1: From AI Models to Autonomous Agents

    Send us Fan Mail This 6-part podcast series describes a Defense-in-Depth Security Architecture for Agentic AI based on the principle of bounded autonomy. The architecture defines 10 layers - governance, identity, authorization, agent guardrails, runtime security, model and tool protection, confidential computing, infrastructure security, continuous validation, and security operations. It also includes 3 cross-cutting layers - enterprise agent control plane, security telemetry and observability, and human oversight and accountability. A critical distinction between identity-based trust—knowing which agent is acting—and execution-based trust—knowing what software and hardware environment is actually executing the agent is also presented. Confidential Computing and Trusted Execution Environments (TEEs) provide an important foundation for the latter through hardware-backed isolation and remote attestation. The podcast maps this architecture to an emerging ecosystem of commercial and open-source technologies. The analysis identifies areas in which the market is rapidly developing as well as persistent architectural gaps, particularly around agent-to-agent trust, memory integrity, execution provenance, and the relationship between identity and attested runtime state. Check out the article or interview at www.activecyber.net

See All (41)

About

Chris Daly podcast on security topics and other emerging topics

Information