Skip to content

Commit 76e0629

Browse files
committed
title changes
1 parent 9092d24 commit 76e0629

File tree

5 files changed

+22
-28
lines changed

5 files changed

+22
-28
lines changed

articles/defender-for-cloud/TOC.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -321,10 +321,10 @@
321321
href: partner-integration.md
322322
- name: AI security posture
323323
items:
324-
- name: Discover generative AI applications
325-
displayName: AI, workloads, models, applications, apps
324+
- name: Discover generative AI workloads
325+
displayName: AI, workloads, models, applications, apps, AI BOM
326326
href: identify-ai-workload-model.md
327-
- name: Explore risks to generative AI applications
327+
- name: Explore risks to pre-deployed generative AI artifacts
328328
displayName: AI, risks, generative, applications, apps
329329
href: explore-ai-risk.md
330330
- name: Data-aware security posture

articles/defender-for-cloud/ai-security-posture.md

Lines changed: 9 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -34,12 +34,6 @@ Regularly updating or patching these can prevent exploits, protecting generative
3434

3535
With these features, Defender for Cloud provides full visibility of AI workloads from code to cloud.
3636

37-
### How discovery works
38-
39-
When the Defender Cloud Security Posture Management (CSPM) plan is enabled, Defender for Cloud discovers generative AI components by scanning code repositories for IaC misconfigurations and container images for vulnerabilities.
40-
41-
These vulnerabilities are presented as recommendations which you can use to analyze and remediate security issues.
42-
4337
## Reducing risks to generative AI apps
4438

4539
Defender CSPM provides contextual insights into an organization's AI security posture. You can reduce risks within your AI workloads using security recommendations and attack path analysis.
@@ -48,13 +42,7 @@ Defender CSPM provides contextual insights into an organization's AI security po
4842

4943
Defender for Cloud assesses AI workloads and issues recommendations around identity, data security, and internet exposure to identify and prioritize critical security issues in AI workloads.
5044

51-
### Analyzing attack paths
52-
53-
Attack paths analysis detects and mitigates risks to AI workloads, particularly during grounding (linking AI models to specific data) and fine-tuning (adjusting a pre-trained model on a specific dataset to improve its performance on a related task) stages, where data might be exposed.
54-
55-
By continuously monitoring AI workloads, attack path analysis can identify weaknesses and potential vulnerabilities and follow up with recommendations. Additionally, it extends to cases where the data and compute resources are distributed across Azure, AWS and GCP.
56-
57-
### Detecting IaC misconfigurations
45+
#### Detecting IaC misconfigurations
5846

5947
DevOps security, detects IaC misconfigurations, which can expose generative AI applications to security vulnerabilities, such as over-exposed access controls or inadvertent publicly exposed services. These misconfigurations could lead to data breaches or unauthorized access. Misconfigurations could lead to compliance issues, especially when handling strict data privacy regulations.
6048

@@ -67,9 +55,15 @@ Current IaC AI security checks include:
6755
- Use Managed Identity for Azure AI Service Accounts
6856
- Use identity-based authentication for Azure AI Service Accounts
6957

58+
### Explore risks with attack path analysis
59+
60+
Attack paths analysis detects and mitigates risks to AI workloads, particularly during grounding (linking AI models to specific data) and fine-tuning (adjusting a pre-trained model on a specific dataset to improve its performance on a related task) stages, where data might be exposed.
61+
62+
By continuously monitoring AI workloads, attack path analysis can identify weaknesses and potential vulnerabilities and follow up with recommendations. Additionally, it extends to cases where the data and compute resources are distributed across Azure, AWS and GCP.
63+
7064
## Related content
7165

72-
- [Explore risks to generative AI applications](explore-ai-risk.md)
66+
- [Explore risks to pre-deployed generative AI artifacts](explore-ai-risk.md)
7367
- [Review security recommendations](review-security-recommendations.md)
7468
- [Identify and remediate attack paths](how-to-manage-attack-path.md)
75-
- [Discover generative AI applications](identify-ai-workload-model.md)
69+
- [Discover generative AI workloads](identify-ai-workload-model.md)

articles/defender-for-cloud/explore-ai-risk.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
---
2-
title: Explore risks to generative AI applications
2+
title: Explore risks to pre-deployed generative AI artifacts
33
description: Learn how to discover potential security risks for your generative AI applications in Microsoft Defender for Cloud.
44
ms.topic: how-to
55
ms.date: 04/18/2024
66
# customer intent: As a user, I want to learn how to identify potential security risks for my generative AI applications in Microsoft Defender for Cloud so that I can enhance their security.
77
---
88

9-
# Explore risks to generative AI applications
9+
# Explore risks to pre-deployed generative AI artifacts
1010

1111
The Defender CSPM plan in Microsoft Defender for Cloud helps you to improve the security posture of generative AI apps, by identifying vulnerable dependencies in libraries. This article explains how to explore, identify, and remediate security risks for those apps.
1212

articles/defender-for-cloud/identify-ai-workload-model.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
---
2-
title: Discover generative AI applications
2+
title: Discover generative AI workloads
33
description: Learn how to use the cloud security explorer to determine which AI workloads and models are running in your environment.
44
ms.topic: how-to
5-
ms.date: 04/18/2024
5+
ms.date: 05/01/2024
66
# customer intent: As a user, I want to learn how to identify AI workloads and models in my environment so that I can assess their security posture.
77
---
88

9-
# Discover generative AI applications
9+
# Discover generative AI workloads
1010

1111
Defender for Cloud provides a comprehensive view of your organization's AI bill of materials (AI BOM). By using the cloud security explorer, you can identify the AI workloads and models that are running in your environment and assess their security posture.
1212

@@ -49,4 +49,4 @@ The cloud security explorer can be used to identify generative AI workloads and
4949
## Next step
5050

5151
> [!div class="nextstepaction"]
52-
> [Explore risks to generative AI applications](explore-ai-risk.md)
52+
> [Explore risks to pre-deployed generative AI artifacts](explore-ai-risk.md)

articles/defender-for-cloud/release-notes.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -24,18 +24,18 @@ If you're looking for items older than six months, you can find them in the [Arc
2424

2525
| Date | Update |
2626
| ----- | ----------------------------------------------------------------- |
27-
| May 6 | [AI security posture management](#ai-security-posture-management) |
28-
| May 6 | [Limited public preview of Defender for AI Workloads](#limited-public-preview-of-defender-for-ai-workloads) |
27+
| May 6 | [AI multicloud security posture management is publicly available for Azure and AWS](#ai-multicloud-security-posture-management-is-publicly-available-for-azure-and-aws) |
28+
| May 6 | [Limited public preview of Defender for AI Workloads in Azure](#limited-public-preview-of-defender-for-ai-workloads-in-azure) |
2929

30-
### AI security posture management
30+
### AI multicloud security posture management is publicly available for Azure and AWS
3131

3232
May 6, 2024
3333

3434
We are announcing the inclusion of AI security posture management in Defender for Cloud. This feature provides AI security posture management capabilities for Azure and AWS that enhance the security of your AI pipelines and services.
3535

3636
Learn more about [AI security posture management](ai-security-posture.md).
3737

38-
### Limited public preview of Defender for AI Workloads
38+
### Limited public preview of Defender for AI Workloads in Azure
3939

4040
May 6, 2024
4141

0 commit comments

Comments
 (0)