Lub lim tiam dhau los, pab neeg Xygeni tau nyob ntawm OWASP Global AppSec EU 2026 nyob rau hauv Vienna, qhov twg 800+ tus kws tshaj lij kev ruaj ntseg hauv internet tau sib sau ua ke ntawm Austria Center rau OWASP hnub tseem ceeb 25 xyoos. Ob hnub ntawm lub rooj nthuav qhia, ntau tus neeg tau tham nrog CISCov thawj coj ntawm OS, AppSec, thiab cov kws ua haujlwm DevSecOps, thiab ib qho cim qhia meej: kev ruaj ntseg ntawm cov khoom siv software tau nkag mus rau theem tshiab, thiab feem ntau cov koom haum tsis tau npaj rau nws.
Nov yog yam peb pom, yam peb tau qhia, thiab yam kev lag luam qhia peb.
OWASP tau tshaj tawm dab tsi hauv Vienna
Cov lus tshaj tawm tseem ceeb ntawm lub rooj sib tham xyoo no yog OWASP AISVS 1.0, tso tawm rau lub Rau Hli 24, 2026, thaum lub sijhawm ntawd. standard muaj 514 qhov yuav tsum tau ua pov thawj thoob plaws 12 tshooj uas suav nrog txhua yam los ntawm kev txhaj tshuaj sai sai mus rau kev ruaj ntseg MCP. Tsis zoo li cov qauv kev tswj hwm xws li NIST AI RMF lossis ISO / IEC 42001, txhua qhov yuav tsum tau ua AISVS yog sau kom raug kuaj xyuas, dhau lossis tsis ua tiav. Nws yog thawj qhov kev txheeb xyuas kev ruaj ntseg uas zej zog tsav, sim tau standard tsim los rau AI systems, ua qauv raws li OWASP ASVS, lub kub standard rau kev ruaj ntseg ntawm daim ntawv thov web..
Dhau ntawm AISVS, cov kev sib tham tau qhia txog qhov chaw uas lub zej zog tau tig mus rau qhov twg. Kev sib tham txog kev ruaj ntseg ntawm daim ntawv thov tus neeg sawv cev, kev ruaj ntseg MCP, kev siv cov khoom siv software ruaj ntseg, kev tshawb nrhiav AI ntxoov ntxoo, thiab kev sim cov ntawv thov LLM hauv kev tsim khoom tau ua lub sijhawm tseem ceeb. OWASP LLM Sab saum toj 10, Agentic Apps Top 10, thiab MCP Top 10 tsis yog cov frameworks tshiab lawm; lawv nyob rau hauv lub neej tiag tiag standardfeem ntau cov koom haum tseem tsis tau teev lawv qhov kev pheej hmoo. Vienna ua rau qhov sib txawv ntawd pom tseeb.
Xygeni tau qhia dab tsi ntawm lub rooj muag khoom G-08
Peb siv ob hnub ntawm lub rooj sib tham los qhia txog qee yam uas kev lag luam tab tom thov ntau ntxiv tab sis tsis tshua pom hauv kev xyaum: yuav ua li cas nrhiav pom, tau qhab nia, thiab siv kev ruaj ntseg thoob plaws AI uas koj cov pab pawg siv los tsim, tsis yog tsuas yog cov lej uas lawv tsim tawm xwb.
Qhov kev tshwm sim thawj zaug hauv Vienna ntawm Xygeni AI Inventory tau qhia txog tag nrho lub koom haum qhov chaw tawm tsam AI tau kos duab rau lub sijhawm tiag tiag, txhua tus qauv, tus neeg sawv cev, MCP server, thiab cov cuab yeej sau code AI, nrog rau cov qhab nia kev pheej hmoo, cov duab qhia kev sib raug zoo, thiab ib qho AI-BOM uas xa tawm tau npaj txhij rau cov neeg tswj hwm thiab enterprise Cov neeg yuav khoom. Rau feem ntau cov neeg tuaj xyuas lub rooj muag khoom, nws yog thawj zaug uas lawv tau pom lawv tus kheej qhov chaw tawm tsam AI ua ib qho khoom muag uas muaj cov qauv thiab kuaj xyuas tau.
Lub AI Dependency Firewall tau ua pov thawj tias Shield thaiv cov pob khoom npm phem ntawm qhov kawg ntawm tus tsim tawm ua ntej nruab, ua ntej muaj kos npe. Qhov no yog kev tswj hwm cov khoom siv software ruaj ntseg uas ib txwm muaj. SCA cov cuab yeej tsis tuaj yeem muab, kev tshawb pom uas ua haujlwm thaum lub sijhawm rub tawm, tsis yog tom qab pob twb khiav nws cov ntawv sau postinstall lawm.
Cov kev sib tham uas ua raws li cov qauv qhia tau zoo sib xws. Feem ntau cov pab pawg tsis tuaj yeem teb cov lus nug ntawm qhov screen: qhov twg yog AI nyob rau hauv koj SDLC?
Peb Yam Uas Lub Rooj Sib Tham Txog Kev Ua Lag Luam Qhia Rau Peb
Thoob plaws ntau kaum ob qhov kev sib tham ntawm lub rooj muag khoom thiab hauv txoj kev hauv tsev, peb lub ntsiab lus tau tshwm sim ntau zaus.
Kev ruaj ntseg MCP yog qhov chaw tshiab uas tsis pom kev
Txhua pab pawg neeg khiav AI coding assistants lossis agent workflows muaj MCP servers uas lawv tsis tau sau tag nrho. Feem ntau tsis muaj daim ntawv tso cai, tsis muaj kev saib xyuas tus cwj pwm, thiab tsis muaj txheej txheem kev ua haujlwm ntawm qhov kawg ntawm tus tsim tawm. Qhov no tsis yog qhov txhawj xeeb tshwj xeeb, 5.5% ntawm cov pej xeem MCP servers nqa cov cuab yeej lom, thiab 43% nqa cov kab mob tsis zoo. AISVS 1.0 mob siab rau ib tshooj tag nrho rau MCP kev ruaj ntseg xav tau, thiab cov kev sib tham ntawm Vienna tau lees paub tias qhov no yog qhov uas nthwv dej tom ntej ntawm kev tawm tsam saw hlau yuav tsaws.
Lo lus nug AI-BOM tab tom los ua qhov tseeb
Cov thawj coj kev ruaj ntseg pib tau txais cov lus thov los ntawm cov neeg tshuaj xyuas thiab enterprise cov neeg yuav khoom rau cov khoom muag uas nyeem tau los ntawm tshuab ntawm txhua yam khoom muaj nqis AI hauv lub koom haum (qauv, cov ntaub ntawv teeb tsa, cov neeg sawv cev, MCP servers, thiab cov cuab yeej AI coding) nrog lawv txoj kev sib raug zoo, cov qhab nia kev pheej hmoo, thiab kev kos duab kev cai lij choj. Feem ntau cov koom haum tsis tuaj yeem tsim ib qho niaj hnub no. AI-BOM sai sai dhau los ua tus neeg ua tiav AI-era rau SBOM, thiab cov koom haum uas tuaj yeem tsim ib qho raws li qhov xav tau yuav muaj qhov zoo dua ntawm kev ua raws li txoj cai thiab kev ntseeg siab thaum EU AI Act cov luag haujlwm tshuaj xyuas tuaj txog.
Kev ruaj ntseg ntawm cov khoom siv software tam sim no txhais tau tias kev ruaj ntseg ntawm txheej AI
Kev tswj hwm cov khoom xa tuaj ib txwm muaj (SCA, SBOM tiam, tsim keeb kwm, SLSA daim ntawv pov thawj) tau tsim rau lub ntiaj teb uas tib neeg sau cov lej thiab cov pob khoom los ntawm cov ntawv sau npe pej xeem. Xyoo 2026, cov neeg sawv cev AI commit cov lej ua haujlwm ywj pheej, MCP cov servers ua cov cuab yeej hu rau cov neeg siv, thiab cov pob khoom phem tau raug tsim los tsom mus rau AI cuab yeej ncaj qha. Ib qho kev ruaj ntseg software xa khoom uas tsis npog qhov chaw tawm tsam AI tsis tiav lawm. Vienna ua rau qhov kev pom zoo ntawd pom tseeb thoob plaws cov rooj muag khoom, kev sib tham hauv lub rooj sib tham, thiab kev sib tham hauv tsev.
Peb coj dab tsi los ntawm Vienna
OWASP Global AppSec EU 2026 yog ib qho chaw ntsuas uas muaj txiaj ntsig zoo. Peb qhov kev sib tham uas tshwm sim ntau zaus ntawm lub rooj nthuav qhia (MCP kev ruaj ntseg, AI-BOM kev npaj txhij, thiab kev ruaj ntseg tag nrho cov khoom siv software hauv AI-native SDLC) yog cov kev sib tham uas Xygeni tau tsim los rau.
Zero Trust tau mus txog lub network, huab, thiab tus kheej ntau xyoo dhau los. Lub voj voog ntawm kev tsim kho software yog txheej uas tseem tsis tau npog tag nrho. Nrog rau AI-generated code tam sim no suav txog 40% ntawm commitnyob rau ntawm cov koom haum ua thawj coj, thiab nrog cov txheej txheem ua haujlwm ntawm tus neeg sawv cev nthuav dav qhov chaw tawm tsam sai dua li cov cuab yeej AppSec ib txwm muaj peev xwm hloov kho tau, qhov sib txawv ntawd tab tom dhau los ua qhov kev sib tw tseem ceeb rau cov pab pawg kev ruaj ntseg hauv ib nrab xyoo tom ntej ntawm 2026.
Yog tias koj tsis tau mus saib Vienna thiab xav pom qhov peb tau ua qauv qhia ntawm Booth G-08, muaj ob txoj hauv kev mus tob dua: coj ib qho kev ncig xyuas khoom kom pom lub platform ua haujlwm, lossis phau ntawv demo, thiab peb yuav coj koj mus saib qhov peb tau qhia rau ntawm lub rooj nthuav qhia.
FAQ
OWASP AISVS yog dab tsi?
OWASP AISVS (AI Kev Txheeb Xyuas Kev Ruaj Ntseg) Standard) yog thawj qhov kev txheeb xyuas kev ruaj ntseg uas zej zog tsav, sim tau standard tsim los rau cov kab ke AI. Tso tawm thaum Lub Rau Hli 2026 ntawm OWASP Global AppSec EU Vienna, nws muaj 514 qhov yuav tsum tau ua pov thawj thoob plaws 12 tshooj, suav nrog kev cob qhia cov ntaub ntawv kev ncaj ncees, kev txhaj tshuaj sai, kev ruaj ntseg MCP, kev sib koom ua ke ntawm tus neeg sawv cev, cov khoom xa tuaj, thiab ntau ntxiv. Tsis zoo li cov qauv kev tswj hwm, txhua qhov yuav tsum tau ua yog sau kom raug kuaj xyuas tias dhau lossis tsis dhau.
Yuav ua li cas thiaj muaj kev ruaj ntseg ntawm cov khoom siv software hauv xyoo 2026?
Ib txoj saw hlau muab khoom siv software ruaj ntseg hauv xyoo 2026 txhais tau tias tiv thaiv tsis yog tsuas yog qhib-qhov chaw nyob xwb, CI/CD pipelines, thiab tsim cov khoom cuav, tab sis kuj tseem muaj cov qauv AI, cov neeg sawv cev, MCP servers, thiab cov cuab yeej AI coding uas tam sim no tau muab tso rau hauv txhua theem ntawm kev tsim kho software. Raws li cov neeg sawv cev AI commit cov code uas tsis siv neeg thiab cov pob khoom phem nce ntxiv tsom mus rau AI tooling, kev ruaj ntseg ntawm cov khoom xa tuaj tau nthuav dav kom suav nrog tag nrho cov kev txhim kho tus neeg sawv cev.
