---
id: "quote-infrastructure-supply-chain-problem"
type: "quote"
source_timestamps: ["\\\"§ Research", "Methodology", "and Findings\\\""]
tags: ["core-thesis", "infrastructure"]
related: ["claim-infrastructure-over-application"]
speaker: "Hugo Huang"
speakers: ["Hugo Huang"]
quote: "AI security is not primarily an application problem. It is an infrastructure and supply chain problem."
source_title: "Research: Conventional Cybersecurity Won't Protect Your AI"
source_url: "https://hbr.org/2026/01/ts-research-conventional-cybersecurity-wont-protect-your-ai"
sources: ["tail2"]
sourceVaultSlug: "hbr-seg-tail2"
originDay: 2
articleStem: "hbr-tail-128-cybersecurity-wont-protect-ai"
sourceUrl: "https://hbr.org/2026/01/ts-research-conventional-cybersecurity-wont-protect-your-ai"
sourceTitle: "Research: Conventional Cybersecurity Won’t Protect Your AI"
---
# AI Security Is an Infrastructure Problem

> "AI security is not primarily an application problem. It is an infrastructure and supply chain problem."
> — [[entity-hugo-huang|Hugo Huang]]

The central conclusion of the multi-layered research conducted by [[entity-canonical|Canonical]], [[entity-google-d2|Google]], and [[entity-idc|IDC]]. This is the thesis statement of the entire source and the plain-language form of [[claim-infrastructure-over-application]]. Note the enrichment caveat carried on that claim: external grounding supports the underlying *principle* but pushes back on ranking infrastructure as strictly *primary* over the AI-logic and data layers.