HP Drives the Next Chapter of Intelligent Work

CrowdStrike launched its Falcon AI Detection and Response (AIDR) enhanced security model to provide protection as attacks become more prominent in the AI era.

CrowdStrike aims for it's updated Falcon platform to be the industry’s first unified platform that secures each layer of enterprise AI – data, models, agents, identities, infrastructure, and interactions – from development through workforce usage.

The Falcon AIDR platform is a unified security model for AI, aiming to protect everything from the environments where AI runs to the interaction layer where prompts and agents operate. It includes CrowdStrike's See AI Everywhere to gain deep visibility into how employees use AI and how agents operate; and Block Prompt Injection Attacks to stop jailbreaks and unsafe content in real time, powered by intelligence from deep research on adversarial prompt datasets.

Other features include the ability to block unsafe interactions and contain malicious agent actions, as well as accelerating secure AI innovation by building secure applications and agents with built-in safeguards for developers.

The platform is targeted at protecting what the vendor calls the AI interaction layer, which is where AI systems reason, decide, and take action. Those attacks attempt to use hidden instructions to hijack agents and access sensitive data in “the new attack surface” and prompts as “the new malware."

“Prompt injection is a frontier security problem. Adversaries are injecting hidden instructions into genAI tools to weaponize the very systems transforming how work gets done," CrowdStrike President Michael Sentonas noted. “Falcon AIDR secures every prompt, response, and agent action in real time, extending the power of the Falcon platform to the interaction layer and delivering complete protection across our customers’ AI infrastructure.”

CrowdStrike partnered with F5 to bring AI-driven detection and response to the network perimeter by embedding the CrowdStrike Falcon Sensor directly into F5’s BIG-IP family of network operations hardware and software.

Similar to CrowdStrike’s latest addition, that integration was said to bring AI-driven detection and response to the network perimeter – a layer that increasingly carries sensitive API traffic but often lacks the same protection applied to traditional endpoints.

CrowdStrike also partnered with Cloudflare focused on zero-trust access where Cloudflare's Cloudflare One secure access service edge (SASE) service now touts out-of-the-box zero-trust capability from CrowdStrike's Falcon suite. The incorporated function signals on policies, access, apps, and groups to automate security operations center (SOC) workflows.

The direction of CrowdStrike’s work yielded positive results earlier this year when it managed to turn outage compensation into a user retention tool as the vendor leveraged the post-outage CCP program to test market demand for Falcon Flex. This resulted in more than 1,000 users signing up to its Falcon Flex licensing model, with more than 100 contract renewals to use CrowdStrike parlance, secured in the second quarter alone.