VentureBeat
Follow
The three layers of agentic AI security: A defense-in-depth architecture for autonomous agents
Autonomous systems introduce new risks that traditional security controls cannot manage. Oscar Wahlberg of Nutanix emphasizes that treating these risks as a single problem leads to incomplete architectures. Agents can hallucinate and cause harm, like deleting databases or leaking data, once granted execution privileges. A defense-in-depth architecture spanning infrastructure, networking, and a control plane is essential to address these risks. Each layer must handle distinct categories of risk, and no single control or vendor can provide comprehensive protection. Zero trust segmentation and dividing responsibilities across layers create a secure framework. The infrastructure layer establishes a root of trust by verifying agent identity and environment integrity. The network layer governs how AI agents communicate, treating them as new network identities with restricted interactions. Nutanix's Agent Gateway, combined with zero trust, manages these interactions and prevents lateral movement. The control plane acts as the central brain, managing agent permissions, tool access, and resource consumption. This layer provides visibility, audits, and controls, mitigating risks like privilege misuse and data leakage. A one-size-fits-all security approach fails because it doesn't address the specific needs of each layer. This can create blind spots and leave critical vulnerabilities open. A partnership between Intel, Cisco, and Nutanix demonstrates this layered approach, with Intel handling hardware trust, Cisco securing communication, and Nutanix providing the software platform and control plane. The control plane is often underestimated but is crucial for managing agent identities, permissions, and budgets for safe scaling.