AI Learning Beyond 1's and 0's

I first learned about quantum computing in a podcast about cybersecurity that I was listening to. I think in my mind it meant faster computing and did not really go beyond how it would be faster. I wanted a talk on it and wanted to figure out how to get into the quantum computing field. Why? It sounded so interesting and challenging.


Recently, I read an article about Q* being about to solve math problems that were previously thought to be unsolvable by AI. The difference was that problem-solving was no longer using only 1s and 0s. 


It was interesting the initial reaction that it was a threat to humanity and I am not sure what else it can do that makes it a threat. Maybe it is the possibility of things that it can do.


All I really know is that I find it very interesting and very much something that I probably would change my career path, if given the chance. 


Learning new things is always very fascinating to me. I like to know and understand the new things. The difference between the two things mentioned above is that I seriously considered figuring out how to change my career path to do them. Not in the way probably most people are thinking. More in the way I want to know how they work so I can secure them. 


I think many things in technology are very beneficial and they should be used - - used securely and with an understanding of the risks. Some person was the first person to figure out how to secure most things that we use today. There is always a point where it is something that became viable and now has to be secure. 


I think it is always much harder to secure things after you build them instead of while you build them. Except in most cases you do not even know if it is going to work so why would you want to spend additional money securing a product that might not work. This means it most likely will have to be secure after it is built or sort of built and it may actually take on a couple of different iterations.


These are the things that I find challenging and keep me interested in always learning more. There will always be more ways to secure an environment and more ways to exploit things. It is a never-ending cycle that can be very frustrating at times except there is always a solution to the problem.


AI can learn with more than 1s and 0s is interesting to me because so can I, and I want more challenges and staying up late trying to figure out how the adversaries could breach my environment.

Comments

Post a Comment

Popular posts from this blog

Understanding Protection (SC)

Understanding Protection (SC) These controls focus on protecting system boundaries, communications, and preventing unauthorized data exposure. Let's break down the key SC controls with examples. SC-1: Policy and Procedures This foundational control requires documented policies and procedures for system and communications protection. Example: SYSTEM AND COMMUNICATIONS PROTECTION POLICY Version: 2.1 Last Updated: 2025-01-02 1. PURPOSE This policy establishes requirements for protecting the organization’s cloud infrastructure and communications. 2. SCOPE Applies to all cloud systems within the authorization boundary. 3. POLICIES 3.1 Encryption Requirements - All data in transit must use TLS 1.2 or higher - All data at rest must use FIPS 140-2 validated encryption - Key rotation required every 365 days 3.2 Network Security - All external connections must traverse a DMZ - Firewall rules follow deny-by-default principle - Monthly review of access control lists 4. PROCEDURES 4.1 Firewall ...
Read more

Security Assessment (SA) Controls

The Security Assessment (SA) family of controls, derived from NIST 800-53 Revision 5, plays a pivotal role in keeping systems secure over time. What Are the Security Assessment (SA) Controls? The SA family of controls focuses on ensuring that security controls are assessed for their effectiveness and are continuously monitored throughout the life of the system. This means checking whether the security measures in place are not only effective but remain effective and up-to-date as time progresses. For FedRAMP Moderate, these controls are crucial because: They ensure security controls are evaluated regularly. They support continuous monitoring for vulnerabilities or weaknesses. They establish corrective actions when necessary. SA-1: Security Assessment and Authorization Policies and Procedures Control Overview SA-1 requires the development of security assessment and authorization (A&A) policies and procedures. These procedures outline the process for conducting security assessm...
Read more

FedRAMP Moderate Rev 5 SI Controls

  In this post, I'll break down each SI control in FedRAMP Moderate Rev 5 and provide tips.   SI-1: System and Information Integrity Policy and Procedures The key to a strong base is well-documented policies and procedures.  For SI-1, organizations must: - Develop and maintain system and information integrity policies that address purpose, scope, roles, and responsibilities - Define procedures for implementing security controls - Review and update these documents at least annually Example:  Create a System and Information Integrity Policy document that includes: - Malware protection requirements with procedures - System monitoring procedures - Software and firmware update processes - Security alert handling processes and procedures - Error handling protocols  SI-2: Flaw Remediation Flaw remediation is key for maintaining system security.  Organizations must: - Identify, report, and correct system flaws promptly - Test software updates before deployment...
Read more