This session is for members.

Subscribe or log in to watch every GoSec session.

Subscribe Log in

This recording is not available yet.

The 20 year overnight story: AI and Cybersecurity

Download resources

About this session

Stuart McClure, CEO of Qwiet AI, opens with the story that shaped him: at nineteen, an upgrade to first class put him steps from a mid-flight cargo-door failure that killed nine passengers on a Hawaii-bound United Airlines flight, and the pilots' near-impossible landing became his personal case for preventing the preventable. He traces that mission through founding Foundstone, building McAfee's practice, and starting Cylance, whose 2019 sale to BlackBerry funded his current push to apply AI to cybersecurity. He argues every attack reduces to exploitable or missing code, so protection should move left toward developers rather than stay in post-production detection, and warns against letting one vendor's LLM both write and secure the same code. Citing OpenAI CTO Mira Murati's evasive answer about what trained the Sora video model, he stresses that LLMs learn from a small, biased slice of human data. He closes on his newest venture, Wethos, which trains a personal AI copilot on an individual's biases and reasoning style, arguing human-plus-AI will keep beating AI alone.

Stuart will unveil the history and power of both predictive and generative AI in the cybersecurity landscape and where we must go to survive our unchartered future.

Key takeaways

  • Frame security work around prevention, not just faster detection and response; by the time you detect, the damage is already occurring.
  • Push security left into the development pipeline: fixing exploitable or missing code while it is written is cheaper than post-production blocking.
  • Separate the vendor that generates your code from the one that secures it; using the same LLM for both creates a conflict of interest that repeatedly fails in practice.
  • Treat LLM output as trained on a small, unrepresentative slice of human data, and expect answers to vary run to run rather than treating them as ground truth.
  • Plan for AI augmenting people rather than replacing them: a human paired with AI consistently outperforms AI alone, even for junior roles.

Speakers

Stuart Mcclure
Stuart Mcclure
CEO · Qwiet AI
Stuart is a serial CEO, entrepreneur and business leader. He has over 35 years of experience building business in tech and cybersecurity, and founded five startups including Foundstone and Cylance the fastest on record to $100M in ARR, which was… Read moreRead less

Stuart is a serial CEO, entrepreneur and business leader. He has over 35 years of experience building business in tech and cybersecurity, and founded five startups including Foundstone and Cylance the fastest on record to $100M in ARR, which was acquired for $1.5B in 2019. He was Global CTO for McAfee/Intel, and has helped birth the cybersecurity practices for both Kaiser Permanente and Ernst & Young. He is the lead and founding author of the #1 cyber security hacking book, Hacking Exposed, which details the tools, techniques and procedures of hackers in order to empower defenders to prevent cyber attacks. Stuart earned his B.A. in Psychology and Philosophy with an emphasis in Computer Science from CU Boulder. Today, Stuart is CEO of Qwiet AI, a leading provider of AI-powered application security testing.

Resources

Tags

More from GoSec 2024

Also from Stuart Mcclure

On the same topic

This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.