0:00
/
0:00
Transcript

Ep 33: The Future of Identity in AI Agents with Ian Livingstone

In this episode, we sit down with Ian Livingstone to explore how AI is reshaping application security. The conversation focuses on one of the hardest emerging problems: agent identity. Ian breaks down why traditional identity and permission models fall apart when applied to non-deterministic AI agents, and what this means for access control, data security, and system design.

We also discuss where agent identity is headed, how insurance may play a role in managing AI-driven risk, and what security teams need to rethink as AI systems become active participants rather than passive components.

00:00–02:15 — Beyond AI hype: why security and agent identity matter

02:15–09:18 — Understanding identity in the age of AI agents

09:18–13:41 — Why service accounts and OAuth break down for agents

13:41–20:11 — Granular permissions, least privilege, and agent intent

20:11–25:55 — Security risks in agent workflows and prompt-driven systems

25:55–28:34 — Data security, IAM, and the agent exfiltration problem

28:34–30:47 — Non-determinism and rethinking how we secure systems

30:47–32:14 — The agent identity problem on the public internet

32:14–35:10 — Why the internet still lacks real application identity

35:10–39:12 — The future of authentication for agents and bots

39:12–40:28 — Emerging standards, AIUC, and insuring agents

40:28–43:09 — Liability, insurance, and accountability for autonomous systems

43:09–45:51 — How security roles evolve in an agent-native world

45:51–49:23 — Technical attack surfaces: MCPs, poisoned tools, and confusion

49:23–51:32 — Trust, contracts, and responsibility in software ecosystems

51:32–54:28 — Why AI adoption is top-down and what it means for security

Tune in for a deep dive!

Connect with Ian Livingstone:

Website: https://www.ianlivingstone.ca/

Twitter: https://x.com/ianlivingstone

Connect with Anshuman:

LinkedIn: ⁠⁠⁠⁠⁠⁠anshumanbhartiya⁠⁠

X: ⁠⁠⁠⁠⁠⁠https://x.com/anshuman_bh⁠⁠

Website: ⁠⁠⁠⁠⁠⁠https://anshumanbhartiya.com/⁠⁠

⁠⁠⁠⁠Instagram: ⁠⁠anshuman.bhartiya⁠

⁠⁠⁠Connect with Sandesh:

LinkedIn: ⁠⁠⁠⁠⁠⁠anandsandesh⁠⁠

X: ⁠⁠⁠⁠⁠⁠https://x.com/JubbaOnJeans

Thanks for reading The BoringAppSec Community! Subscribe for free to receive new posts and support my work.

Discussion about this video

User's avatar

Ready for more?