When Ram Shankar Siva Kumar launched Microsoft’s AI red team in 2019, the discipline barely existed.

“The running joke used to be that people who used to work in AI red teaming, you can round them up in a 14-foot catamaran,” he tells CSO.

At the time, Microsoft’s approach looked familiar to anyone in cybersecurity: Attack machine learning systems the same way security teams attacked everything…