Lightning Talk: Operationalizing AIBOMs in AI Supply Chains

Operationalizing AIBOMs: Policy-Gating Models & Datasets in AI Supply Chains 🎙️ Dr. Ugur Koc, SR. AI R&D Engineer, Manifest 📍 Presented at SANS AI Cybersecurity Summit 2026 AI supply chains ship unvetted models and datasets because VM tooling can’t see inside them. Risks aren’t just CVEs: dataset poisoning, integrity loss, misuse/misalignment, and license issues. With no NVD for AI artifacts, we operationalize AIBOMs as the missing substrate—structured metadata for provenance, lineage, licensing, and revisions—plus policy-as-code CI/CD gates, PSIRT integration, and offline caching of Hugging Face artifacts. Explore upcoming SANS Summits to continue learning from leading voices in cybersecurity: https://go.sans.org/summits