DEF CON 32 - On Your Ocean's 11 Team, I'm the AI Guy (technically Girl) - Harriet Farlow

DEF CON 32 - On Your Ocean's 11 Team, I'm the AI Guy (technically Girl) - Harriet Farlow

Source: YouTube · DEFCONConference · published Oct 16, 2024 · 37:43

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

This talk explores AI security vulnerabilities in casino facial recognition systems through adversarial machine learning attacks 2:02-2:06.

Key Takeaways:
• Casinos use facial recognition AI primarily to identify money launderers, criminals, card counters, and problem gamblers 18:18-19:21
• The presenter demonstrates "distributed adversarial regions" technique that disrupts facial recognition without changing the person's appearance 14:25-14:40
• Most AI models used by organizations are 95-99% similar to open-source models, making them vulnerable to attacks 20:44-21:45
• The attack reduced facial recognition confidence by 40.4% across tested models, demonstrating significant vulnerabilities 27:20-27:31

AI security requires more attention as only 8% of organizations can articulate how they secure their AI systems 35:07-35:20.

Sources:

  • 0:00-0:48 Introduction to the presenter and talk
  • 2:18-3:07 Background on the presenter's AI security experience
  • 11:02-11:08 Explanation of adversarial machine learning
  • 13:43-13:55 Examples of adversarial attacks
  • 23:02-23:13 Demonstration of the attack code

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

are there any Australians here in the room yes um so you might be able to tell from my accent I'm from Australia and back home we have a drinking tradition as well for special occasions and it's called a shoy um I don't know if any of you have heard of it but basically you pour like a shot in a shoe and you drink it from the shoe which sounds disgusting but it's a thing that Aussies do so you know this this this sh is a lot of fun but you'll have a lot to learn from Australians um all right So yeah thank you very much for being here I'm really stoked um the presentation today is called on your Oceans 11 team I'm the AI guy um even though I'm a girl it it just has a better ring to it I need to maybe find a better title but this is my second time at Defcon and my first time speaking and I'm …