Leveraging Agentic AI for Automated CBOM Inventory and Crypto-Agility
· 14:30 – 15:00 Amsterdam time · Room B (5)
Extracting Cryptographic Bill of Materials (CBOMs) from source code is a foundational pillar of the Post-Quantum Cryptography (PQC) transition. However, traditional security scanning methods fall short.
The limitations of SAST and vulnerability tools include limited support for legacy or proprietary languages where old cryptography often hides; the high friction and overhead of deep Abstract Syntax Tree analysis, which is computationally heavy and slows down CI/CD pipelines; scaling bottlenecks from heavy reliance on DevSecOps teams for onboarding and configuration; and a static, reactive posture that identifies risks but does not facilitate active crypto-agility.
Integrating agentic AI into CI/CD pipelines via the Model Context Protocol introduces a scalable and code-agnostic approach to CBOM management. Beyond inventory, agentic AI enables true crypto-agility in pipelines, verifying pull requests and even fixing obsolete cryptography.
Speakers
- Cybersecurity Architect · Airbus
I am a Security Architect and Technical Lead with over 20 years of experience bridging the gap between complex engineering, advanced data analytics, and enterprise cyber resilience. Currently leading security architecture and encryption services at Airbus Aircraft, I specialize in designing robust frameworks that safeguard critical applications data and infrastructure.
My career is built on a strong foundation of fundamental physics and advanced simulations, which naturally evolved into building big data platforms, machine learning applications for fraud and insider threat detection.
Attendance
Open session · first come, first served
Saving interest does not reserve a seat. Admission remains first come, first served.
Save favorite
