Скачать или смотреть Vulnerability Chaining in the Age of AI

Dr. Nikki Robinson shows how AI links minor CVEs into major breaches—and how to break the chain.

SANS Emerging Threats Summit 2025

AI amplifies exploit chains—learn to predict, preempt, and break cascading attacks.

Dr. Nikki Robinson, STSM and Senior Manager, Platform Development, IBM, illustrates graph-based threat modeling that maps tiny flaws into kill-chains when AI tools automate recon and exploit orchestration. She shares metrics for “composability risk” and demos an ML classifier that flags high-lethality vulnerability combos. Mitigations include authoritative asset inventories, SBOM-driven patch queues and simulated chain-attack exercises in purple-team labs.

Key Takeaways
AI accelerates discovery and linkage of low-severity CVEs

Graph risk scoring exposes hidden, chained blast radius

SBOMs and asset maps cut mean-time-to-patch high-combo risks

Simulated chain attacks validate control effectiveness

Prioritize isolation of exploitable pivot assets

View upcoming Summits: http://www.sans.org/u/DuS

#EmergingThreatsSummit #AICyberRisk