You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/defender-for-cloud/ai-onboarding.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,12 +2,12 @@
2
2
title: Onboard Defender for AI Workloads
3
3
description: Learn how to enable the Defender for AI Workloads plan on your Azure subscription for Microsoft Defender for Cloud.
4
4
ms.topic: install-set-up-deploy
5
-
ms.date: 04/17/2024
5
+
ms.date: 05/02/2024
6
6
---
7
7
8
8
# Onboard Defender for AI Workloads
9
9
10
-
To get started you must [sign up](https://aka.ms/D4AI/PublicPreviewAccess) for the plan and be accepted. Once accepted, you can onboard the Defender for AI Workloads plan in Defender for Cloud to provide threat protection for AI workloads in your Azure environment.
10
+
To get started, you must [sign up](https://aka.ms/D4AI/PublicPreviewAccess) for the plan and be accepted. Once accepted, you can onboard the Defender for AI Workloads plan in Defender for Cloud to provide threat protection for AI workloads in your Azure environment.
11
11
12
12
> [!IMPORTANT]
13
13
> The Defender for AI Workloads plan is currently in preview.
@@ -21,7 +21,7 @@ To get started you must [sign up](https://aka.ms/D4AI/PublicPreviewAccess) for t
21
21
22
22
- You must [enable Defender for Cloud](get-started.md#enable-defender-for-cloud-on-your-azure-subscription) on your Azure subscription.
23
23
24
-
- Defender for AI Workloads relies on [Azure Open AI content filtering](../ai-services/openai/concepts/content-filter.md) for prompt-base triggered alert. If you opt out of prompt-based trigger alerts and removed that capability, it can affect Defender for Cloud's ability to monitor and detect such attacks.
24
+
- Defender for AI Workloads relies on [Azure OpenAI content filtering](../ai-services/openai/concepts/content-filter.md) for prompt-base triggered alert. If you opt out of prompt-based trigger alerts and removed that capability, it can affect Defender for Cloud's ability to monitor and detect such attacks.
25
25
26
26
## Enroll in the limited public preview
27
27
@@ -31,27 +31,27 @@ Before you can start to use the Defender for AI Workloads plan, you must enroll
31
31
32
32
1. Wait to receive an email that confirms your acceptance or rejection from the preview program.
33
33
34
-
If you are accepted into the preview program, you can enable the Defender for AI Workloads plan to your Azure subscription.
34
+
If you're accepted into the preview program, you can enable the Defender for AI Workloads plan to your Azure subscription.
35
35
36
36
## Enable the Defender for AI Workloads plan
37
37
38
-
You can enable the Defender for AI Workloads plan on an Azure subscription and AWS accounts.
38
+
You can enable the Defender for AI Workloads plan on an Azure subscription.
39
39
40
40
1. Sign in to the [Azure portal](https://portal.azure.com).
41
41
42
42
1. Search for and select **Microsoft Defender for Cloud**.
43
43
44
44
1. In the Defender for Cloud menu, select **Environment settings**.
45
45
46
-
1. Select the relevant Azure subscription or AWS account.
46
+
1. Select the relevant Azure subscription.
47
47
48
48
1. On the Defender plans page, toggle the AI Workloads plan to **On**.
49
49
50
50
:::image type="content" source="media/ai-onboarding/enable-ai-workloads-plan.png" alt-text="Screenshot that shows you how to toggle the Defender for AI Workloads plan to on." lightbox="media/ai-onboarding/enable-ai-workloads-plan.png":::
51
51
52
52
### Remediate alerts
53
53
54
-
After you have onboarded the Defender for AI Workloads plan, you can [manage and remediate the security alerts](managing-and-responding-alerts.yml) that are generated for your AI workloads.
54
+
After onboarding the Defender for AI Workloads plan, you can [manage and remediate the security alerts](managing-and-responding-alerts.yml) that are generated for your AI workloads.
description: Learn about AI security posture management in Microsoft Defender for Cloud and how it protects resources from AI threats.
4
-
ms.date: 05/01/2024
4
+
ms.date: 05/02/2024
5
5
ms.topic: concept-article
6
6
ms.author: elkrieger
7
7
author: Elazark
@@ -10,27 +10,25 @@ author: Elazark
10
10
11
11
# AI security posture management
12
12
13
-
Microsoft Defender for Cloud provides AI security posture management capabilities that secure enterprise-built, multi or hybrid cloud (currently Azure and AWS) generative AI applications, throughout the entire application lifecycle. Defender for Cloud reduces risk to cross cloud AI workloads by:
13
+
Microsoft Defender for Cloud provides AI security posture management capabilities that secure enterprise-built, multi, or hybrid cloud (currently Azure and AWS) generative AI applications, throughout the entire application lifecycle. Defender for Cloud reduces risk to cross cloud AI workloads by:
14
14
15
-
-Discovering generative AI bill of materials (AI BOM), which includes application components, data, and AI artifacts from code to cloud.
15
+
-Discover generative AI Bill of Materials (AI BOM), which includes application components, data, and AI artifacts from code to cloud.
16
16
- Strengthening generative AI application security posture with built-in recommendations and by exploring and remediating security risks.
17
17
- Using the attack path analysis to identify and remediate risks.
18
18
19
19
:::image type="content" source="media/ai-security-posture/ai-lifecycle.png" alt-text="An image of the development lifecycle that is covered by Defender for Cloud's AI security posture management.":::
20
20
21
-
## Discovering generative AI apps within your environment
21
+
## Discover generative AI apps within your environment
22
22
23
23
Defender for Cloud discovers AI workloads and identifies details of your organization's AI BOM. This visibility allows you to identify and address vulnerabilities and protect generative AI applications from potential threats.
24
24
25
-
Defenders for Cloud automatically and continuously discover deployed AI workloads across the following service:
25
+
Defenders for Cloud automatically and continuously discover deployed AI workloads across the following services:
26
26
27
27
- Azure OpenAI Service
28
28
- Azure Machine Learning
29
29
- Amazon Bedrock.
30
30
31
-
In addition to discovering deployed AI workloads, Defender for Cloud can also discover vulnerabilities within generative AI library dependencies such as TensorFlow, PyTorch, and Langchain. By scanning source code for Infrastructure as Code (IaC) misconfigurations and container images for vulnerabilities.
32
-
33
-
Regularly updating or patching these can prevent exploits, protecting generative AI applications and maintaining their integrity.
31
+
Defender for Cloud can also discover vulnerabilities within generative AI library dependencies such as TensorFlow, PyTorch, and Langchain, by scanning source code for Infrastructure as Code (IaC) misconfigurations and container images for vulnerabilities. Regularly updating or patching the libraries can prevent exploits, protecting generative AI applications and maintaining their integrity.
34
32
35
33
With these features, Defender for Cloud provides full visibility of AI workloads from code to cloud.
36
34
@@ -44,9 +42,11 @@ Defender for Cloud assesses AI workloads and issues recommendations around ident
44
42
45
43
#### Detecting IaC misconfigurations
46
44
47
-
DevOps security, detects IaC misconfigurations, which can expose generative AI applications to security vulnerabilities, such as over-exposed access controls or inadvertent publicly exposed services. These misconfigurations could lead to data breaches or unauthorized access. Misconfigurations could lead to compliance issues, especially when handling strict data privacy regulations.
45
+
DevOps security detects IaC misconfigurations, which can expose generative AI applications to security vulnerabilities, such as over-exposed access controls or inadvertent publicly exposed services. These misconfigurations could lead to data breaches, unauthorized access, and compliance issues, especially when handling strict data privacy regulations.
46
+
47
+
Defender for Cloud assesses your generative AI apps configuration and provides security recommendations to improve AI security posture.
48
48
49
-
Defender for Cloud assesses your generative AI apps configuration and provides security recommendations to improve AI security posture. Remediate misconfigurations early in the development cycle allows organizations to prevent more complex problems later on.
49
+
Detected misconfigurations should be remediated early in the development cycle to prevent more complex problems later on.
50
50
51
51
Current IaC AI security checks include:
52
52
@@ -57,13 +57,13 @@ Current IaC AI security checks include:
57
57
58
58
### Explore risks with attack path analysis
59
59
60
-
Attack paths analysis detects and mitigates risks to AI workloads, particularly during grounding (linking AI models to specific data) and fine-tuning (adjusting a pre-trained model on a specific dataset to improve its performance on a related task) stages, where data might be exposed.
60
+
Attack paths analysis detects and mitigates risks to AI workloads, particularly during grounding (linking AI models to specific data) and fine-tuning (adjusting a pretrained model on a specific dataset to improve its performance on a related task) stages, where data might be exposed.
61
61
62
-
By continuously monitoring AI workloads, attack path analysis can identify weaknesses and potential vulnerabilities and follow up with recommendations. Additionally, it extends to cases where the data and compute resources are distributed across Azure, AWS and GCP.
62
+
By monitoring AI workloads continuously, attack path analysis can identify weaknesses and potential vulnerabilities and follow up with recommendations. Additionally, it extends to cases where the data and compute resources are distributed across Azure, AWS, and GCP.
63
63
64
64
## Related content
65
65
66
-
-[Explore risks to pre-deployed generative AI artifacts](explore-ai-risk.md)
66
+
-[Explore risks to predeployed generative AI artifacts](explore-ai-risk.md)
Copy file name to clipboardExpand all lines: articles/defender-for-cloud/identify-ai-workload-model.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,7 +2,7 @@
2
2
title: Discover generative AI workloads
3
3
description: Learn how to use the cloud security explorer to determine which AI workloads and models are running in your environment.
4
4
ms.topic: how-to
5
-
ms.date: 05/01/2024
5
+
ms.date: 05/02/2024
6
6
# customer intent: As a user, I want to learn how to identify AI workloads and models in my environment so that I can assess their security posture.
7
7
---
8
8
@@ -16,15 +16,15 @@ Defender for Cloud provides a comprehensive view of your organization's AI bill
16
16
17
17
- You need a Microsoft Azure subscription. If you don't have an Azure subscription, you can [sign up for a free subscription](https://azure.microsoft.com/pricing/free-trial/).
18
18
19
-
-Enable [Defender for Cloud on your Azure subscription](connect-azure-subscription.md).
19
+
-Enable [Defender for Cloud on your Azure subscription](connect-azure-subscription.md).
20
20
21
21
- Enable [Defender Cloud Security Posture Management (CSPM)](tutorial-enable-cspm-plan.md) on your Azure subscription.
22
22
23
-
- Have at least one environment with AI supported workloads (Azure Open AI, AWS account).
23
+
- Have at least one environment with AI supported workloads (Azure Open AI, AWS account).
24
24
25
25
## Discover AI workloads and models in use
26
26
27
-
The cloud security explorer can be used to identify generative AI workloads and models running in your environment,
27
+
The cloud security explorer can be used to identify generative AI workloads and models running in your environment.
28
28
29
29
1. Sign in to the [Azure portal](https://portal.azure.com/).
Copy file name to clipboardExpand all lines: articles/defender-for-cloud/release-notes.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -39,7 +39,7 @@ Learn more about [AI security posture management](ai-security-posture.md).
39
39
40
40
May 6, 2024
41
41
42
-
Defender for AI Workloads provides contextual insights into AI workload threat protection, integrating with [responsible AI](../ai-services/responsible-use-of-ai-overview.md) and Microsoft Threat Intelligence. Defender for AI security alerts are integrated into Defender XDR in the Defender portal.
42
+
Defender for AI Workloads provides contextual insights into AI workload threat protection, integrating with [Responsible AI](../ai-services/responsible-use-of-ai-overview.md) and Microsoft Threat Intelligence. Defender for AI security alerts are integrated into Defender XDR in the Defender portal.
43
43
This plan helps you monitor your Azure OpenAI powered applications in runtime for malicious activity, identify and remediate security risks.
44
44
45
45
Learn more about [Defender for AI Workloads](ai-threat-protection.md).
0 commit comments