Join us for our Quarterly Google Cloud Security User Group in our office in Cambridge, Massachusetts! This event is designed for Google Cloud customers and security enthusiasts eager to deepen their knowledge about Cyber Security Challenges along with Google Cloud Security products. Our theme for this quarter is "Securing AI and APIs" packed full of excellent in-depth content from our presenters.

Here's our agenda:

0930 - Check In

1000 - Intro and Chapter Updates (15 mins) (Mike Vaillancourt and Matthew Bein)

1015 - Mandiant Consulting and Intel - Securing AI Innovation: A Proactive Approach (60 mins) (Brice Daniels and Team)

The increasing deployment of Large Language Models (LLMs) and agentic solutions introduces complex security challenges, often due to insufficient integrated governance, proactive threat modeling, dedicated red teaming, and AI-specific detection. Securing this evolving landscape requires foresight and understanding AI's unique attack surface. This talk provides practical insights from a year of securing and attacking AI deployments, revealing common security missteps and critical vulnerabilities in production AI systems. We emphasize proactive measures like AI-specific threat modeling and targeted red team exercises, plus robust governance and response frameworks. Designed for executive leadership and technical professionals, this session offers actionable guidance to navigate AI security complexities and foster resilient AI adoption.

1115 - Bridging the AI Gap (45 mins) (John Murray)

"Bridging the AI Reality Gap" is a presentation for investors that aims to cut through the hype surrounding AI in cybersecurity. It focuses on the significant difference between impressive AI demos and reliable, production-grade AI security products.

1200 - Lunch (45 mins)

1300 - Architecting Defenses for OWASP API & LLM Risks (45 mins) (Bernadette Carson)

Bernadette Carson from the Google Cloud Apigee Customer Engineering team will lead a technical deep dive on securing AI and API services on Google Cloud. This session moves beyond the "what" of the OWASP Top 10 for APIs and LLMs to focus on the "how," covering specific configurations and integration patterns. The presentation will explore the AI Gateway Pattern for centralized policy enforcement, ML-Powered Anomaly Detection using Advanced API Security to find shadow APIs and abuse, and Prompt Injection Countermeasures with Model Armor policies to protect backend models like Vertex AI, Gemini, or other 3rd party models.

1345 - Agentic AI - API and Integration Jam (60 mins) (Bernadette and Matthew Bein) - ***Laptop Required***

The Agentic AI lab provides a hands-on experience developing agents, managing APIs, integrating applications, operationalizing and productizing AI, and securing AI and large language models.

1445 - Closing (15 mins) (Matthew Bein and Michael Vaillancourt)

Don't miss this opportunity to stay ahead in the fast-evolving field of cyber security! Join your peers in tackling the challenges of securing AI and APIs. "Join" the fun and connect, learn, and grow with us in a community that supports your professional journey.

*****Logistics*****

Parking - We will Validate Parking

There are many parking options around the Google Cambridge office, including street parking and parking garages.

Kendall Center "Green" Garage (90 Broadway, Cambridge, MA 02142)

Green Garage:

Address: 90 Broadway (located next to 4CC Entrance, direct access to 3CC & 5CC)

Clearance: 6'4"

Kendall Center "Yellow" Garage (77 Ames Street, Cambridge, MA 02142)

Yellow Garage:

Address: 77 Ames St (closer to 8CC)

Clearance: 6'8"