S2E34: "Embedding Privacy by Design & Threat Modeling for AI" with Isabel Barberá (Rhite & PLOT4ai)

The Shifting Privacy Left Podcast

This week’s guest is Isabel Barberá, Co-founder, AI Advisor, and Privacy Engineer at Rhite , a consulting firm specializing in responsible and trustworthy AI and privacy engineering, and creator of The Privacy Library Of Threats 4 Artificial Intelligence Framework and card game. In our conversation, we discuss: Isabel’s work with privacy-by-design, privacy engineering, privacy threat modeling, and building trustworthy AI; and info about Rhite’s forthcoming Self-Assessment Open-Source framework for AI maturity, SARAI®. As we wrap up the episode, Isabel shares details about PLOT4ai, her AI threat modeling framework and card game created based on a library of threats for artificial intelligence.

Topics Covered:

• How Isabel became interested in privacy engineering, data protection, privacy by design, threat modeling, and trustworthy AI
• How companies are thinking (or not) about incorporating privacy-by-design strategies & tactics and privacy engineering approaches within their orgs today
• What steps can be taken so companies start investing in privacy engineering approaches; and whether AI has become a driver for such approaches.
• Background on Isabel’s company, Rhite, and its mission to build responsible solutions for society and its individuals using a technical mindset.
• What “Responsible & Trustworthy AI” means to Isabel
• The 5 core values that make up the acronym, R-H-I-T-E, and why they’re important for designing and building products & services.
• Isabel's advice for organizations as they approach AI risk assessments, analysis, & remediation
• The steps orgs can take in order to build responsible AI products & services
• What Isabel hopes to accomplish through Rhite's new framework: SARAI® (for AI maturity), an open source AI Self-Assessment Tool and Framework, and an extension the Privacy Library Of Threats 4 Artificial Intelligence (PLOT4ai) Framework (i.e., a library of AI risks)
• What motivated Isabel to focus on threat modeling for privacy
• How PLOT4ai builds on LINDDUN (which focuses on software development) and extends threat modeling to the AI lifecycle stages: Design, Input, Modeling, & Output
• How Isabel’s experience with the LINDDUN Go card game inspired her to develop of a PLOT4ai card game to make it more accessible to teams.
• Isabel calls for collaborators to contribute to the PLOT4ai open source database of AI threats as the community grows.

Resources Mentioned:

• Privacy Library Of Threats 4 Artificial Intelligence (PLOT4ai)
• PLOT4ai's Github Threat Repository
• "Threat Modeling Generative AI Systems with PLOT4ai”
• Self-Assessment for Responsible AI (SARAI®)
• LINDDUN Privacy Threat Model Framework
• "S2E19: Privacy Threat Modeling - Mitigating Privacy Threats in Software with Kim Wuyts (KU Leuven)”
• "Data Privacy: a runbook for engineers"

Guest Info:

Send us a Text Message.

Copyright © 2022 - 2024 Principled LLC. All rights reserved.

Chapters

1. S2E34: "Embedding Privacy by Design & Threat Modeling for AI" with Isabel Barberá (Rhite & PLOT4ai) (00:00:00)

2. Introducing Isabel Barberá, Co-Founder & CEO at Rhite (00:01:46)

3. How Isabel became interested in privacy, engineering, data protection, privacy by design, threat modeling, & trustworthy AI (00:03:29)

4. How companies are thinking about incorporating privacy-by-design strategies & tactics and privacy engineering approaches within their orgs today (00:06:37)

5. The actions required to educate companies adequately so that they start investing in privacy engineering approaches; and whether AI is becoming a a driver (00:09:13)

6. Isabel talks about her PbD, Responsible AI & Privacy Engineering consulting company, Rhite, where she guides companies on how to build responsible solutions with society & individuals in mind (with a technical mindset) (00:12:00)

7. What 'Responsible & Trustworthy AI' means to Isabel (00:14:20)

8. Isabel describes Rhite's 5 core values (00:17:55)

9. How companies are approaching risk assessments, analysis, & remediation of AI harms today (00:21:21)

10. Isabel shares the steps orgs can take so that they build responsible AI products & services (00:26:06)

11. Isabel shares details about SARAI (assesses AI maturity level), an open source AI Self-Assessment Tool and Framework called SARAI - an extension the PLOT4ai framework (which is a library of AI risks) (00:29:36)

12. What motivated Isabel to focus on threat modeling for privacy (00:36:06)

13. Isabel shares information about the LINDDUN Privacy Threat Modeling Framework for software development (00:38:13)

14. How PLOT4ai builds on LINDDUN (which focuses on software development) and extends threat modeling to the AI lifecycle stages: Design, Input, Modeling, & Output (00:40:30)

15. Isabel shares how she's seeking collaborators to help add to PLOT4ai's open source database of AI threats. (00:46:34)