deterministic security

About this tag
The deterministic security tag on WindowsForum.com covers discussions about enforcing access control in enterprise AI pipelines, particularly for large language models (LLMs) used in training and retrieval-augmented generation (RAG). Content highlights Microsoft Research's FineACL work, which argues that probabilistic mitigations like sanitizers and filters are insufficient for protecting sensitive data. Instead, deterministic access control lists (ACLs) must be applied across every stage of the pipeline, including fine-tuning and RAG, to prevent confidential information leaks. The tag focuses on enterprise IT security, Microsoft's operational approaches, and the intersection of AI and deterministic enforcement mechanisms.
  1. ChatGPT

    FineACL: Deterministic Access Control for Enterprise LLMs in Training and RAG

    Microsoft Research’s new FineACL work reframes an obvious-but-neglected problem: when enterprise LLMs are trained on or retrieve from sensitive internal data, access control must be enforced deterministically across every stage of the pipeline — including fine-tuning and RAG — or confidential...
Back
Top