Blog Xygeni

The OWASP Agentic AI Top 10 names the ten ways AI agents fail. Here is what ASI01 to ASI10 actually mean in a real pipeline, where each risk gets in, and which ones you can stop before deploy.

A model extraction attack lets an attacker copy your model one query at a time, with no breach and no stolen file. Here is how model stealing works, and why the first defense is knowing every inference endpoint you expose.

Āraia te kaihoko, tere ake te whakaora, āraia rānei i raro? Tokotoru ngā kaimahi, tokotoru ngā whakautu, ā, kotahi te iti rawa i whakaaetia e rātou katoa.

Ka hurihia e te hangarau hononga kaihoko ngā tauira hei kaihoko whai hua. Ka tukuna hoki e ia he ūnga hou ki ngā kaiwhakaeke: ko ngā kōnae e kī ana ki tō kaihoko he aha tāna e taea ai.

Ko te haumarutanga o ngā tono AI te mea nui rawa atu i OWASP Porto me Karlsruhe. ASPM koia rā, me pēhea te rerekētanga mai i SAST, me te wāhi e āwhina ai te whakarōpūtanga me te whakatikatika a te AI.

E whā ngā kupu rapu, e rua ngā mahi tino rerekē. Kāore te whakahaere i te mōrearea o te AI i te rite ki te whakamahi i te AI mō te whakahaere mōrearea, ā, he maha ngā whakahaere e whakamahi ana i tētahi, engari e hokona ana tētahi atu. Ko te mea whakamere ko te mea ka tupu ina mōhio koe he kaupapa kotahi rātou.

Ināianei ka pātaihia e ia poari te pātai kotahi: he aha tā tātou mōrearea AI? Ko te nuinga o ngā tīma ka whakautu mā te whakamahi i ngā kupu āhua. Anei ngā inenga mōrearea AI e whakaputa ana i tētahi tau, nō hea ia i ahu mai ai, me ngā mea me hipoki e tētahi rautaki AI ā-ringa i mua i te tikanga o tētahi o aua mea.

E rua ngā mea ka tukuna i raro i te pane kotahi, ā, ehara i te mea kotahi te raruraru. Ko ngā whakaekenga ki ngā pūnaha AI me ngā whakaekenga e whakamahia ana e te AI me whai mana whakahaere rerekē, rangatira rerekē, me taunakitanga rerekē. Tekau ngā tūmomo riri, ka wehea kia rua ngā haurua, me te taahiraa kotahi e whai ake ana i a rātou katoa.