AI Security Engineering

Praise for AI SECURITY ENGINEERING “AI Security Engineering captures what every CISO defending AI in production already feels: traditional controls assume stability, but AI systems are continuously evolving and increasingly autonomous. Ashish reframes security as a property engineered into pipelines, runtime, and the execution paths where inference becomes reified action—the practical mental model security leaders need to design, govern, and contain AI at enterprise scale.” —JASON CLINTON, Deputy CISO at Anthropic “Most AI security writing tells you what’s scary. Ashish tells you what to build. The first book that treats AI security as an engineering discipline instead of a threat catalog.” —CALEB SIMA, Chair at CSA AI Security Initiative “AI Security Engineering cuts through the hype and gets to what actually matters: how AI systems behave in production, and why traditional security models weren’t built for them. Ashish Rajan reframes security as an architecture and product decision, not a control layer, giving CISOs and builders a rigorous mental model for governing, operating, and containing AI systems at runtime to scale safely.” —SRINATH KURUVADI, Information Security Executive, Ex-Netflix/Snap/Meta/Google “As we can expect from Ashish, he’s put out a book on securing AI that sees the issue as a systems problem instead of one-dimensional. Great coverage here for all the major considerations in this fast-moving field.” —DANIEL MIESSLER, Founder of Unsupervised Learning “This book cuts through the hype around AI security and focuses on what actually matters: how AI systems behave, fail, and must be governed in production. A must-read for CISOs, security architects, and engineering leaders preparing for the next generation of security challenges.” —TEJAS DAKVE, Senior Manager of Application Security Design, Build, and Secure Dependable AI Systems Across the Enterprise Lifecycle AI is rapidly becoming part of core enterprise systems but most security programs were not designed for systems that are probabilistic, adaptive, and increasingly autonomous. AI Security Engineering provides a foundational, engineering-first playbook for designing, operating, and scaling secure AI systems across the enterprise lifecycle. Written by Ashish Rajan, a CISO advising Fortune 500 organizations on AI security, this book focuses on security for AI systems not AI used as a security tool. It examines how AI changes traditional security assumptions and how organizations must adapt their architectures, pipelines, governance models, and operating practices to manage AI risk effectively in production environments. Rather than focusing on tools or point solutions, AI Security Engineering applies security engineering principles to modern AI systems. It covers AI threat models, secure AI pipelines, runtime detection and incident response, governance and compliance at scale, and the emerging challenges of agentic and multi-model systems. Readers are guided through how to evolve existing security programs to support AI-enabled applications without slowing delivery or becoming the “department of no”. This book shows how to: Design and operate secure AI systems across their full lifecycle from architecture and delivery to operations and scale Defend production AI applications against adversarial, emergent, and agent-driven threats Embed governance and risk controls into AI pipelines using engineering-first approaches Operate AI security in dynamic environments, including third-party and agentic systems Balance regulatory compliance, system performance, and engineering velocity CISOs seeking strategic clarity for AI security investments, security architects designing resilient systems, and engineers responsible for operating AI in production will find this book a durable reference for building dependable AI systems at enterprise scale.

Pages: 368, Edition: 1, Paperback, Wiley