This session offers a critical and timely exploration into the evolving landscape of cybersecurity, directly confronting the seismic shift brought about by Agentic AI. As artificial intelligence transcends static, reactive systems to become truly autonomous, goal-driven entities, our established security paradigms—especially foundational threat modeling practices—are being rendered dangerously obsolete.
The core premise is that traditional threat modeling, built on assumptions of predictable systems and human control, is fundamentally unprepared for these self-governing AI entities. We will unveil the profound "autonomy gap" that exists between current security practices and Agentic AI's emergent capabilities. This gap manifests in several critical areas:
• Unpredictable Decision-Making
• Dynamic and Evolving Attack Surfaces
• Expanded Attack Vectors via Tool Use
• Goal Misalignment and Drift
• Challenges in Explainability and Auditability
• The Overwhelmed Human-in-the-Loop

GDG Ahmedabad DevFest 2025