AI agent security
AI agents now act, not just answer. I research controls that limit the harm an agent can do, including an agent that is compromised or trying to get around its limits.
AI security · Information systems · Human behaviour
I'm Dr Brent Coker, an information systems researcher at the University of Melbourne. I study where system design meets human behaviour, and I now focus that work on AI security: controlling what AI agents are allowed to do when the stakes are high and the agent may not be trustworthy.
AI agents now act, not just answer. I research controls that limit the harm an agent can do, including an agent that is compromised or trying to get around its limits.
My background is in how people are persuaded and misled online. AI makes deception cheaper and more convincing, and it also makes AI systems themselves targets for manipulation.
As an expert witness I have given evidence on fraud, privacy and data manipulation. AI incidents are reaching courts and regulators, and they need the same careful, evidence-based analysis.
In progress
How do you stop an AI agent from taking an action that puts critical infrastructure or public safety at risk, even if the agent is working against you? INTERLOCK treats an agent's ability to cause harm as a budget that is spent as it acts, with hard caps on damage that can't be undone and controls that hold across organisations.
The work draws on a corpus of more than 3,700 papers on AI control and security. Papers and a plain-English explainer will appear here as they are published.
I hold a PhD in electronic commerce and information systems from Victoria University of Wellington, and I have been a Senior Lecturer at the University of Melbourne since 2008, teaching digital marketing and digital business models from undergraduate to MBA level.
My research on consumer behaviour and online decision-making has been published in the Journal of Experimental Social Psychology, the Journal of Retailing and Harvard Business Review. I have been appointed as an expert witness in matters involving consumer deception, fraud, privacy and data manipulation.
I also build. I founded a dot-com in 1998, invented the web analytics tool Webreep, and today I direct Deloosh, where I build and security-review AI systems in production.