Ram Shankar Siva Kumar is a Data Cowboy working on the intersection of machine learning and security. At Microsoft, he founded the AI Red Team, bringing together an interdisciplinary group of researchers and engineers to proactively attack AI systems and defend from attacks.
His recent book on attacking AI systems, NOT WITH A BUG has been called “Essential Reading” by Microsoft’s Chief Technology Officer and received wide praise from industry leaders at DeepMind, OpenAI as well as policy makers and academia. He is donating his proceeds of the book royalty to Black In AI. His work on AI and Security has appeared in industry conferences like RSA, BlackHat, Defcon, BlueHat, DerbyCon, MIRCon, Infiltrate, academic workshops at NeurIPS, ICLR, ICML, IEEE S&P, ACM - CCS.
His work has been covered by Bloomberg, VentureBeat, Wired, and Geekwire. He founded the Adversarial ML Threat Matrix, an ATT&CK style framework enumerating threats to machine learning. His work on adversarial machine learning appeared notably in the National Security Commission on Artificial Intelligence (NSCAI) Final report presented to the United States Congress and the President. His work on adversarial machine learning appeared notably in the National Security Commission on Artificial Intelligence (NSCAI) Final report presented to the United States Congress and the President.
At the Berkman Klein Center for Internet and Society at Harvard University, he is broadly investigating two questions: How do we assess the safety of ML systems? What are the policy, political and legal ramifications of AI Safety?






