{"id":133905,"date":"2024-05-06T09:00:00","date_gmt":"2024-05-06T16:00:00","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?p=133905"},"modified":"2024-11-20T12:53:50","modified_gmt":"2024-11-20T20:53:50","slug":"new-capabilities-to-help-you-secure-your-ai-transformation","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/05\/06\/new-capabilities-to-help-you-secure-your-ai-transformation\/","title":{"rendered":"New capabilities to help you secure your AI transformation"},"content":{"rendered":"\n

AI is transforming our world, unlocking new possibilities to enhance human abilities and to extend opportunities globally. At the same time, we are also facing an unprecedented threat landscape with the speed, scale, and sophistication of attacks increasing rapidly. To meet these challenges, we must ensure that AI is built, deployed, and used responsibly with safety and security at its core. And it is more important than ever to leverage AI to empower all defenders and tilt the balance in their favor.<\/p>\n\n\n\n

Security is our top priority at Microsoft\u2014above all else\u2014and our expanded Secure Future Initiative<\/a> underscores our company-wide commitment to making the world a safer place for everyone. I am proud that Microsoft is prioritizing security in the age of AI as we continue to innovate with a security-first mindset. <\/p>\n\n\n\n

Today, new capabilities are now available in Microsoft Defender and Microsoft Purview to help organizations secure and govern generative AI applications at work. These releases deliver purpose-built policy tools and better visibility to help you secure and govern generative AI apps and their data. We are also delivering a new unified experience for the security analyst and integrating Microsoft Copilot for Security across our security product portfolio.  <\/p>\n\n\n\n

You\u2019ll be able to see firsthand these innovations and more across the Microsoft Security portfolio at RSA Conference (RSAC). I also hope you will also join me on Tuesday, May 7, 2024, for \u201cSecuring AI: What We\u2019ve Learned and What Comes Next<\/a>,\u201d to explore the strategies that every organization can implement to securely design, deploy, and govern AI.<\/p>\n\n\n\n

Secure your AI transformation with Microsoft Security<\/h2>\n\n\n\n

Wherever your organization is in your AI transformation, you will need comprehensive security controls to secure govern your AI applications and data throughout their lifecycle\u2014development, deployment, and runtime.  <\/p>\n\n\n\n

With the new capabilities announced today, Microsoft becomes the first security provider to deliver end-to-end AI security<\/a> posture management, threat protection, data security, and governance for AI.<\/p>\n\n\n

\"A<\/figure>\n\n\n\n

Discover new AI attack surfaces, strengthen your AI security posture, and protect AI apps against threats with Microsoft Defender for Cloud<\/a>.<\/strong> Now security teams can identify their entire AI infrastructure\u2014such as plugins, SDKs, and other AI technologies\u2014with AI security posture management capabilities across platforms like Microsoft Azure OpenAI Service, Azure Machine Learning, and Amazon Bedrock. You can continuously identify risks, map attack paths, and use built-in security best practices to prevent direct and indirect attacks on AI applications, from development to runtime.<\/p>\n\n\n\n

Integrated with Microsoft Azure AI services, including Microsoft Azure AI Content Safety and Azure OpenAI, Defender for Cloud will continuously monitor AI applications for anomalous activity, correlate findings, and enrich security alerts with supporting evidence. Defender for Cloud is the first cloud-native application protection platform (CNAPP) to deliver threat protection<\/a> for AI workloads at runtime, providing security operations center (SOC) analysts with new detections that alert to malicious activity and active threats, such as jailbreak attacks, credential theft, and sensitive data leakage. Additionally, SOC analysts will be able facilitate incident response with native integration of these signals into Microsoft Defender XDR.<\/p>\n\n\n\n

Identify and mitigate data security and data compliance risks<\/strong> with Microsoft Purview.<\/strong> Give your security teams greater visibility into and understanding of which AI applications are being used and how to help you safeguard your data effectively in the age of AI. The Microsoft Purview AI Hub, now in preview<\/a>, delivers insights such as sensitive data shared with AI applications, total number of users interacting with AI apps and their associated risk level, and more. To prevent potential oversharing of sensitive data, new insights help organizations identify unlabeled files that Copilot references and prioritize mitigation of oversharing risks. Additionally, we are excited to announce the preview of non-compliant usage insights in the AI Hub to help customers discover potential AI interactions that violate enterprise and regulatory policies in areas like hate and discrimination, corporate sabotage, money laundering, and more.<\/p>\n\n\n\n

Govern AI usage to comply with regulatory policies with new AI compliance assessments in Microsoft Purview.<\/strong> We understand how important it is to comply with regulations, and how complicated it can be when deploying new technology. Four new Compliance Manager assessment templates, now in preview, are available to help you assess, implement, and strengthen compliance with AI regulations and standards, including EU AI Act, NIST AI RMF, ISO\/IEC 23894:2023, and ISO\/IEC 42001. The new assessment insights will also be surfaced within the Purview AI Hub, providing recommended actions to support compliance as you onboard and deploy AI solutions.<\/p>\n\n\n\n

Together we can help everyone pursue the benefits of AI, by thoughtfully addressing the new risks. The new capabilities in Microsoft Defender for Cloud and Microsoft Purview<\/a>, which build on top of the innovations we shared at Microsoft Ignite 2023 and Microsoft Secure 2024, are important advancements in empowering security teams to discover, protect, and govern AI\u2014whether you\u2019re adopting software as a service (SaaS) AI solutions or building your own.<\/p>\n\n\n\n

Read more<\/a> about all of the new capabilities and features that help you secure and govern AI.<\/p>\n\n\n\n

Strengthening end-to-end security with a unified security operations platform<\/h2>\n\n\n\n

We continue investing in our long-standing commitment to providing you with the most complete end-to-end protection for your entire digital estate. There is an immediate need for tool consolidation and AI to gain the speed and scale required to defend against these new digital threats. Microsoft integrates all of the foundational SOC tools\u2014cloud-native security information and event management (SIEM), comprehensive native extended detection and response (XDR), unified security posture management, and generative AI\u2014to deliver true end-to-end threat protection in a single platform, with a common data model, and a unified analyst experience.  <\/p>\n\n\n\n

The new unified security operations platform experience, in preview<\/strong>, transforms the real-world analyst experience with a simple, approachable user experience that brings together all the security signals and threat intelligence currently stuck in other tools. Analysts will have more context at every stage, with helpful recommendations and suggestions for automation that make investigation and response easier than ever before. We are also introducing new features across Microsoft Sentinel<\/a> and Defender XDR<\/a>, including global search, custom detections, and automation rules.<\/p>\n\n\n\n

We are also pleased to announce a number of additional new features and capabilities that will empower your security operations center (SOC) to work across Microsoft security products for stronger end-to-end security.<\/p>\n\n\n\n