Securing the Notebook: AI Supply Chain and Model Risk in... - Rajyavardhan Handa, Workday

Securing the Notebook: AI Supply Chain and Model Risk in Interactive Computing - Rajyavardhan Handa, Workday As AI-assisted workflows become central to interactive computing, notebook environments increasingly sit inside the AI/ML supply chain, exposed to risks like dependency confusion, model poisoning, and data lineage compromise. This talk applies enterprise AI security practices to the notebook-driven development lifecycle: from adversarial testing of models loaded into notebooks to tracing multi-hop exploit paths across dependencies, containers, and hybrid cloud deployments common in research and production pipelines. Drawing on experience building AI security frameworks and running enterprise red teaming programs, the session outlines a practical approach for data scientists and platform teams to harden notebook workflows: securing third-party package dependencies, validating model provenance, and building resilience monitoring into experimentation environments without slowing research velocity. Attendees leave with a lightweight threat model for their own Jupyter-based pipelines, a checklist for evaluating dependency and model risk, and a clear view of how enterprise AI security practices translate to open, reproducible computing environments.