I-AI iyahambisana ne-code, futhi iyahambisana ne-exploration ye- vulnerabilities. I-Code eyenziwe ngu-AI ibonise izinhlobo ezintsha zamafutha ethu awukwazi ukuhlangabezana ne-ancient vulnerabilities, kanye ne-ancient vulnerabilities, kodwa ngezinga eliphezulu kakhulu. Thina akuyona ukuthi akuyona indlela yokusebenzela. Wonke abantu abathola ubuchwepheshe ezintsha, futhi ukhuseleko kwandisa kakhulu njengoba ukuhlangabezana kwe-human isixazululo isixazululo software ngokuvamile. Ukubambisana ne-security professional namhlanje kunzima kakhulu, futhi nge-power ye-AI, ungakwazi ukwenza umphumela eningi kunoma ngexesha elandelayo. Thesis Thesis Umhlahlandlela we-Articles isekelwe eminyakeni ezintathu: 
 
 
 
 Ngezinyanga ezidlulayo, i-99% ye-code iyatholakala ku-AI. Ukusetshenziswa kwama-AI amamodeli ebhekwe ku-software iyaqhubeka ukwandisa. Ikhodi eyenziwe nge-AI ayikho ngokwemvelo okungabizi kunesithi eyenziwe ngabantu. Uma lezi zimo zibonele, imiphumela yokhuseleko kwezicelo kuyinto enhle. Ukukhishwa kwe-AI akufanele ukunciphisa ingozi. It uzobandisa, futhi ijubane lokuguqulwa ngeke akuyona ingozi emibi. Ibhizinisi lokhuseleko uzodinga ukufundisa ngokuvumelana. What Changed Yini ukuguqulwa Pull imibuzo, izivivinyo, ngisho ukulethwa - iningi kunezinto. I-AI iyahlanza indlela yokubhala i-software. I-AI iyahlanza indlela yokubhala i-software. Oku kuholele ku: 
 
 
 
 I-More Code, i-Production ye-Faster Izinzuzo ezinguquguqukayo Izinzuzo kanye nezinzuzo ezivamile ezivame Ngokuvamile, imibuzo ayizange. Zibonisa kuphela ngesivinini. Isivinini sokudlulisa ngokushesha, kodwa izibambo zokhuseleko ezivame, njenge-peer reviews, i-QA cycles, kanye ne-manual security testing, zihlukanise. Lokhu kuyinto i-paradox ye-AI ku-software: isixazululo se-speed, kodwa ivumela ukhuseleko ku-a constant race to keep up. Nokho ukhuseleko Okungenani wonke umkhakha we-application security angakutholanga izivakashi ukuthi abacwaningi bakwazi ukulawula ukhuseleko, kodwa izivakashi zithunyelwe ngokuvamile noma zithunyelwe. I-tension phakathi kwama-development speed ne-security ayikho entsha, kodwa i-AI inikeza isakhiwo esisha. Izindaba ezinhle kukhona ukuthi i-AI ibhekwa imiyalezo. It akugqiba i-Jira Tickets. It akugqiba ngesikhathi sokucwangciswa kwe-sprint. Ngaphandle kokuphumelela ama-developer, ungakwazi ukufaka ama-fixes, ukufaka ama-revisions, futhi ngisho ukufaka izinhlelo zokuthuthukiswa okuvikelwa. Ngaphandle kokufundisa abantu, ungakwazi manje ukunikezela ama-cybersecurity ama-agents. Siye nje ukucindezelisa indawo ye-automation esizayo. Ngokwenza lokhu, inqubo ye-AppSec ingahluka kusuka ku-convincing ne-policing kuya ku-enabling ne-embedding. Ungathanda ngokuvamile ukucubungula izinhlelo zokhuseleko ku-mass of how software is generated. Izinzuzo ezintsha, izinzuzo ezintsha I-AI iguquguquka izindawo ezintsha ze-attack: 
 
 
 
 Injection ngokushesha Ukuqeqeshwa Data Ukukhishwa Ukusetshenziswa kwe-supply chain Injection ngokushesha Ukuqeqeshwa Data Ukukhishwa I-attackers iyathola i-AI, futhi zithembisa ngokukhawuleza kunazo zonke izigaba ze-patch ezivamile. Uma ukuguqulwa kunzima izinsuku, akugcwele. I-bar iyahambisana izinsuku ezingu-ezinsuku. Futhi lezi zizinto ezingu-hypothetical - izibonelo ezivamile ziye zihlanganisa emangalisayo. Qinisekisa umngciwane we-automated okuyinto akuyona, ukucubungula nokuthuthaza izinga lokuphumula, futhi uqala ukubona izinzuzo. Ukuze ama-Engineers e-AppSec, lokhu kuyinto izinzuzo futhi ithuba. Unemibuzo embalwa embalwa embalwa embalwa embalwa embalwa embalwa embalwa embalwa embalwa embalwa embalwa embalwa embalwa embalwa. Yini i-AppSec Teams Kufuneka Yenza Ukuguqulwa okuhlobisa ukubonisa umsebenzi: 
 
 
 
 
 Ukwakha ukhuseleko ngqo ku-automated workflows Ukusebenza okuzenzakalelayo, akuyona kuphela ukucubungula Ukunciphisa MTTR ku amahora I-Monitoring I-AI-specific threats njenge-part of normal operations Uma unemibuzo lapho ukuqala, ukunceda ukunciphisa i-MTTR - kodwa kuphela iziphumo ezifanayo. Ungabathisa izilinganiso zokusiza ukuguqulwa kwezimpendulo ezingenalutho ngokushesha. Ukukhishwa kwe-priority yayo akuyona kuyinto enhle futhi enhle. Lokhu kuphela kungase kubaluleke indlela yobuchwepheshe ekutholeni futhi iboniswe ku-organisation. Ngaphezu kwalokho, abacwaningi be-security kufanele akuyona ukulawula nokutholelwa. Umbhali we-AI-driven code? Umbhali we-AI-generated logic akufanele ukuhlangabezana nokuhlukaniswa kwe-compliance noma i-bias? Lezi zophando zithintela i-AppSec kusuka ku-technical kuya ku-strategic. Amabhizinisi abalandeli okokuqala ngeke zibonise i-tone ye-industry. Ukuphakama I-AI inikeza i-AppSec ekubeni indlela yokwakha kanye nokhuseleko kwe-software eyenziwe. Ukusebenza okuhle kakhulu, kodwa futhi kuhle kakhulu. I-AppSec ikunye inesibopho eningi kunazo ukwakha indlela yokhuseleko we-software. I-opportunity yokwenza imiphumela enhle ku-engineering ne-operations ikhona futhi ikakhulu. Uma unjiniyela we-AppSec namhlanje, uye sikhulu. Uya ku-transformation eningi kakhulu ethandwa kwebhizinisi. Umthamo wakho yokuguqulwa, ukuzenzakaleka kanye nokuvumela ngeke ikakhulukazi kuphela ukhuseleko kwezicelo ezimbalwa, kodwa ngokuvamile ukuguqulwa kwe-ecosystems ephelele ye-digital. 
 
 Umbhali Amit Chita, Field CTO ku-Mend.io By Amit Chita, Field CTO at  Mend.io Ngena ngemvume Ngena ngemvume

Lo msindo ukhiqizwa ngolimi lokuqala lwendaba!

Uma ungumlingani we-AppSec, uye uye ngempumelelo

About Author

IMIBONO

HANG TAGS

LESI SIHLOKO SETHULWE NGAPHAKATHI

Related Stories

The Billionaires F*cked Up

Zulu Network: Moving The Bitcoin Economy Forward With a Two-Tiered Bitcoin Layer 2 Architecture

The Billionaires F*cked Up

Zulu Network: Moving The Bitcoin Economy Forward With a Two-Tiered Bitcoin Layer 2 Architecture

Light-Mode

Classic

Newspaper

Dark-Mode

Neon Noir

Minty

HN StartUps