AI security observability in the agent era – News

As artificial intelligence becomes native to every layer of the stack, a new era of intelligent and fluid infrastructure is emerging — bringing with it new demands for AI security observability.

In fact, security is rising to the forefront as organizations confront expanding attack surfaces and an ever-growing flood of data. For SentinelOne Inc., a long-running partnership with Amazon Web Services Inc. underpins its AI-driven security platform, according to Ana Pinczuk (pictured, left), chief product and technology officer of SentinelOne.

“We have the ability to bring data from the [AWS] Security Hub into our Singularity SentinelOne product and be able to look at security issues across the state,” Pinczuk said. “Being able to look at what’s in the cloud as well as what’s at the end point on workloads, et cetera, and give our customers a much more holistic view.”

Pinczuk and Mona Chadha (right), director of category management at Amazon Web Services Inc., spoke with theCUBE’s John Furrier at AWS re:Invent, during an exclusive broadcast on theCUBE, News Media’s livestreaming studio. They discussed the rise of autonomous agents in modern systems and the growing importance of AI security observability.

AI security observability becomes a frontline

As AI’s role expands, so does the need for robust observability. That’s driving a shift in how organizations think about their telemetry and security data. For the past two years, AWS has seen observability merge with data management and security, according to Chadha.

“Typically, they would be these point products,” Chadha said. “It’s like: No, they’re all in separate applications. We all have to bring them together.”

This gives security professionals wider visibility, allowing them to see across many different applications and products at once. As a result, the traditional boundaries between these areas are steadily blending into a single, unified view, according to Chadha.

“Observability is a key component, which is one of the reasons we built these frontier agents that we have with Kiro, with DevOps and with security, because that brings it all together,” Chadha explained. “Now observability has to be almost native to your security solution. That’s what we’ve seen working very closely with SentinelOne.”

With the foundation in place, the focus for information technology teams moves to building on top of agents to create more advanced, automated experiences. That’s exactly what is doing, according to Pinczuk.

“First of all, going back to observability, we have our [Security and Event Management] product, which is like our security incident and response capabilities,” she said. “We have all the data that we collect in there — that’s very adjacent to our premier endpoint business.”

All of that data flows in, allowing teams to see what’s happening across the infrastructure and take action through an observability lens. The latest development builds on that capability through a new integration with CloudWatch, according to Pinczuk.

“CloudWatch looks at assets that are really beyond security. It has access to more what an IT person would see,” Pinczuk explained. “From an observability perspective, the power of this is to bring IT data [and] security data together.”

This creates a smarter environment with more data feeding directly into the solution, Pinczuk noted. By bringing IT and security data together, the companies aim to give both chief information security officers and their teams a shared view of risk.

“I think that’s what’s the power of both organizations being together is — that also we cater a lot to the CISO or the security analysts, but AWS caters a lot to the IT professional,” Pinczuk explained. “We’re starting to merge that data.”

Here’s the complete video interview, part of News’s and theCUBE’s coverage of AWS re:Invent:

Photo: News