SE Radio 729: Garth Mollett on AI Supply Chain Security
About this episode
Garth Mollett discusses AI supply chain security and its differences from conventional software supply chain security.
Garth Mollet , Senior Principal Product Security Engineer and Technical Advisor for Product Security at Red Hat, joins host Robert Blumen for a discussion of AI supply chain security. They start with the basics of supply chain security, including the key components of the AI supply chain, and how it differs from the conventional software supply chain. Garth discusses whether the attacks target model weights or inference, and describes the most common attacks and what's in it for the attacker, whether exfiltration, credentials, sabotage, or resources. The episode also considers SPIFFE, SPIRE, attestation, workload identity, and whether AI has the equivalent of "reproducible builds." Brought to you by IEEE Computer Society and IEEE Software magazine.
Sponsors
IEEE Computer Society, IEEE Software
More episodes of Software Engineering Radio - the podcast for professional software developers
- SE Radio 728: Clare Liguori on AWS Strands SDK for AI Agents
- SE Radio 727: Jeroen Janssens and Thijs Nieuwdorp on Using Polars
- SE Radio 726: Scott Kingsley on the Swagger Ecosystem
- SE Radio 725: Danny Yang and Sam Goldman on the Pyrefly Type Checker
- SE Radio 724: Jure Leskovec on Relational Graph and Foundational Models
- SE Radio 723: Dave Airlie on Linux Kernel Maintenance
Explore listener stats, chart rankings, contacts and more on the Software Engineering Radio - the podcast for professional software developers podcast page.