AI Security and SBOM (Paperback)

Paperback. AI Security and SBOM: Securing the AI Software Supply Chain A Practical Guide to Software Bills of Materials, AI Model Transparency, and Supply Chain Risk Management Your AI solutions depend on far more than application code. Models, datasets, training pipelines, fine-tuning jobs, vector indexes, third-party APIs, and cloud-hosted services all shape what your AI does and what can go wrong. Traditional Software Bills of Materials (SBOMs) were built for conventional software. They were never designed for this expanded, opaque AI supply chain. This book gives you a practical path from SBOM fundamentals to a working AI supply chain security program so you can see what you have, trust what you deploy, and respond when something breaks. What you will be able to do after reading this book Build complete visibility into your AI stack: Inventory models, datasets, pipelines, frameworks, and third-party dependencies, not just libraries and containersExtend SBOM concepts into AI-BOM, Model BOM (MBOM), Dataset BOM (DBOM), and Pipeline BOM (PBOM)Map hidden relationships across training, fine-tuning, evaluation, and inferenceReduce real supply chain risk before it reaches production: Identify and prioritise threats including model poisoning, data poisoning, malicious pre-trained models, artefact tampering, and dependency compromiseAssess risks from open-source ML libraries, model repositories, containers, and API providersValidate dataset integrity, track model lineage, and confirm the artefact you tested is the artefact you deployedOperationalise AI supply chain security in your organisation: Design an AI BOM framework with clear scope, asset classification, governance roles, and ownershipAutomate asset discovery and generate AI-aware SBOMs using standards like CycloneDX ML extensionsIntegrate inventory, validation, and policy enforcement into CI/CD, MLOps, and DevSecOps workflowsMeet regulatory and audit expectations with evidence, rather than guesswork: Align your program with Executive Order 14110, the EU AI Act, NIST AI RMF, and Secure by Design initiativesManage AI vendor risk with SBOM procurement clauses, model assurance reviews, and continuous third-party monitoringCollect audit ready evidence, map controls, and report supply chain posture to leadership and the boardDetect, contain, and recover from AI supply chain incidents: Monitor for drift, artefact integrity failures, and behavioural anomalies at runtimeRespond to compromised models, poisoned datasets, and pipeline tampering with structured forensics and rebuild proceduresMeasure success with coverage metrics, risk reduction indicators, compliance readiness, and business valueWho this book is for Written for security professionals, leaders, architects, DevSecOps engineers, AI/MLOps practitioners, risk and compliance teams, and technology leaders who need actionable guidance. Whether you are launching a pilot program or scaling AI SBOM across the enterprise, you will find frameworks, automation strategies, rollout plans, and KPIs you can apply immediately. AI supply chain failures rarely look like traditional breaches. A backdoor into a model can behave normally until a specific trigger appears. Poisoned training data can produce subtle, dangerous outputs while your application code remains untouched. Without provenance, inventory, and integrity controls, you cannot know what your AI was built from or whether it changed after approval. Stop guessing about your AI dependencies. Start building the visibility, controls, and confidence your organisation needs to ship AI responsibly. Incl Shipping may be from multiple locations in the US or from the UK, depending on stock availability. …