<\/p>\n
![](\"https:\/\/www.trendmicro.com\/content\/dam\/trendmicro\/global\/en\/research\/thumbnails\/25\/ai-security-nvidia-bluefield.jpg\")
<\/div>\nTrend Vision One leverages the DOCA SDK to create a lightweight yet powerful security agent that runs directly on the BlueField-3 DPU. This integration provides several key capabilities:<\/p>\n
Comprehensive Host Data Collection<\/b>: The solution monitors file activity, network interfaces, and running processes across the AI infrastructure. Unlike traditional endpoint agents that might impact system performance, this DPU-based approach collects telemetry without affecting AI workload performance.<\/p>\n
Advanced Network Flow Monitoring<\/b>: By positioning monitoring capabilities at the DPU level, the solution gains unprecedented visibility into network communications between AI components, containers, and services. This network-level monitoring is essential for detecting sophisticated attacks that might bypass traditional endpoint security.<\/p>\n
Threat Intelligence Correlation<\/b>: The integration connects DPU-collected telemetry with Trend Micro’s extensive threat intelligence database, enabling rapid identification of known threats and attack patterns specific to AI environments.<\/p>\n The Trend Vision One integration addresses several critical security scenarios specific to AI infrastructures:<\/p>\n Credentials Dump Detection<\/b>: AI environments often contain valuable credentials for cloud services, data repositories, and internal systems. The solution monitors for unauthorized access attempts and credential harvesting activities that could indicate a breach.<\/p>\n Reverse Shell Detection<\/b>: Attackers often establish persistent access to AI infrastructure through reverse shells. The DPU-based monitoring can detect these communications patterns even when they’re obfuscated or hidden within legitimate AI traffic.<\/p>\n Suspicious Object Detection<\/b>: AI environments process vast amounts of data and models. The solution can identify suspicious files, malicious models, or unauthorized data that might indicate an attack or data exfiltration attempt.<\/p>\n Threat Intelligence Correlation<\/b>: By combining real-time DPU telemetry with Trend’s global threat intelligence, the solution can rapidly identify and respond to emerging threats targeting AI infrastructure.<\/p>\n The DOCA SDK integration enables several technical advantages:<\/p>\n Lightweight Deployment<\/b>: Unlike traditional endpoint agents that require installation on every system, the DPU-based approach provides comprehensive coverage through infrastructure-level deployment.<\/p>\n Real-time Processing<\/b>: Dedicated DPU processing power enables real-time threat analysis and response without impacting AI workload performance.<\/p>\n Centralized Management<\/b>: Through the Trend Vision One console, security teams can manage and monitor AI infrastructure security from a single platform, integrating with existing security operations workflows.<\/p>\nSecurity Use Cases and Detection Capabilities<\/span><\/b><\/h3>\n
Technical Implementation and Benefits<\/span><\/b><\/h3>\n