Kua noho te pūtake tuwhera hei tūāpapa mō te whanaketanga pūmanawa o ēnei rā. Tata ki ngā tono katoa o ēnei rā e whakawhirinaki ana ki tētahi whatunga matatini o ngā whare pukapuka tuatoru, ngā anga mahi, ngā tauira, me ngā taputapu hanga. Nā tēnei āhuatanga anake kua whakauru mai i ngā mea nui software supply chain security ngā wero. I taua wā anō, kua uru mai te mātauranga horihori ki te te huringa ora o te whanaketanga pūmanawa hei whakatere kaha, hei whakaputa waehere, hei whakaaro i ngā whakawhirinakitanga, hei aunoa i ngā whakatikatika, tae atu ki te awe i te hoahoangacisngota. Nā te mahi tahi a te pūmanawa tuwhera me te AI i whakarerekē te hanga o te pūmanawa, me te āhua o te whakaekenga. Ko te hononga o te haumarutanga AI, te AI me te haumarutanga pūmanawa, me software supply chain security kāore i te ariā noa iho. Koinei tētahi o ngā pūtake matua o te mōrearea mekameka tuku pūmanawa e pāngia ana e ngā whakahaere hangarau.
Nā taua mooni i whakatakoto tā mātou Kōrero SafeDev tata nei: Pūtake Tuwhera, AI me te Mata Whakaeke Hou: Waehere Patu, Parenga Atamai Ake, e whakaatu ana i ngā kaiārahi haumarutanga mai i Red Hat, TikTok, me Xygeni. I arotahi te matapaki ki ngā āhuatanga o ngā tīma haumarutanga me te miihini i roto i ngā taiao whakaputa, inā koa mō ngā whakaekenga mekameka tuku tuwhera pūtake, ngā mōkihi tuwhera kino, me te pikinga o te taupatupatu i waenga i te tere me te mana whakahaere i roto i te whanaketanga pūmanawa e whakahaerehia ana e te AI. Ko te mea i puta ko tētahi pikitia mārama: kei te tere ake te horapa o te mata o te whakaeke i tā ngā tauira haumarutanga tuku iho e taea ai te pupuri, ā, kei te mahi te AI hei whakarea kaha me te whakamātautau ahotea mō ngā whakapae roa i roto i te haumarutanga AI me software supply chain security.
Mena he tata rawa tēnei whakaahuatanga ki te āhua o te hanga pūmanawa a tō whakahaere i tēnei wā, ehara tēnā i te mea tūpono noa iho. He maha ngā tīma ka kite noa i te nui o te whakawhirinaki kua neke ki te aunoatanga i muri i te pakaru o tētahi mea.
Haumarutanga AI me te Software Supply Chain Security Ko te raruraru tonu tēnei inaianei
Ko tētahi kaupapa i puta tonu mai i te kōrero ko te kore e taea te whakaaro ki te haumarutanga AI hei kaupapa motuhake mai i software supply chain securityKāore ngā pūnaha AI e mahi takitahi; ka hangaia, ka whakangungua, ka whakatinanahia, ka whakauruhia hoki mā roto i te taua pipelinengā mea e pāngia ana e ngā whakaekenga mekameka tuku pūtake tuwhera, me ngā rēhita e raru ana ki ngā whakaekenga mekameka tuku tuwhera.
I roto i te whanaketanga pūmanawa e whakahaerehia ana e te AI, ka tūtohu aunoa ngā tauira i te waehere, ka whakaputa whakatikatika, ka tīpako aunoa i ngā whakawhirinakitanga. Ko ēneiciska pā tika ngā iona ki te whakahaere whakawhirinakitanga pūtake tuwhera, he maha ngā wā kāore he hiahia tangata. Nō reira, kāore te mōrearea whakawhirinakitanga e peia ana e te kōwhiringa a te kaiwhakawhanake anake; kei te piki haere te hanga e te whanonga AI.
Ko te tikanga o tēnei huihuinga, ko ngā hapa i roto i te AI me te haumarutanga pūmanawa ka puta pinepine hei aituā mekameka tuku iho: ngā whakawhirinakitanga kua pakaru, ngā taonga hanga kua poke, ngā mea ngoikore rānei. CI/CD ngā tukanga. Ahakoa he mea hou te taputapu, he tino tūturu te mōrearea o te mekameka tuku pūmanawa, ā, he uaua haere te whakaaroaro.
Mena kei te wehewehe tonu ō tauira mōrearea i te "mōrearea AI" mai i te "mōrearea mekameka tuku," he mea tika pea kia tirohia anō te wāhi e tū ana taua rohe i roto i ō rerengamahi hanga me te whakatinanatanga.
Ngā Whakaekenga o te Mekameka Tuku Pūtake Tuwhera i te Tere o te Mīhini
Ehara i te mea hou ngā whakaekenga mekameka tuku tuwhera, engari ka hurihia e te AI ō rātou ōhanga. Kāore e hiahiatia ana e ngā kaiwhakaeke he tikanga hou; me whai tauine rātou. Ka taea e te AI te tātari tere i te rauropi, te kimi aunoa i ngā whakawhirinakitanga ngoikore, me te tere o te whakahou i ngā kawenga whakaeke.
Mai i te tirohanga whakaeke, nā te whanaketanga ahumahi o te tirotiro ka nui ake te angitu o ngā whakaekenga e whakamahi ana i ngā mōkihi pūmanawa tuwhera kino. Ko ngā wāhanga kāore i kitea i mua ka taea te kimi, te tātari, me te whakamahi tere, i mua i te mōhio o ngā kaiwawao kei te whakamahia.
Ko te aha tenei software supply chain security kāore e taea te whakawhirinaki ki ngā tohu whakaroa anake. Ko ngā rēhita, ngā tohutohu, me ngā whakaaturanga i muri i te wā tūturu ka mahi i runga i ngā wā tangata, ko ngā kaiwhakaeke ia ka piki haere te mahi i te tere mīhini. Ko te matapihi whakaaturanga ka puta he takoha tika ki te tipu haere o te mōrearea mekameka tuku pūmanawa.
Mena ko tō tohu kitenga matua ko "nā te rēhita i tango te mōkihi," kei te mahi kē koe i raro i te rārangi wā a te kaiwhakaeke.
Kei te hiahia koe ki te ruku hōhonu ki ngā whakaekenga mekameka tuku pūmanawa pūtake tuwhera?
Te Mōrearea Whakawhirinakitanga i roto i te Whakawhanaketanga Pūmanawa e Aratakina ana e te AI
Ko tētahi o ngā mōrearea tino mārama i kōrerohia i te SafeDev Talk ko te mōrearea whakawhirinaki, inā koa i roto i ngā taiao e tino whakawhirinaki ana ki te whanaketanga pūmanawa e whakahaerehia ana e te AI. Kua arotauhia ngā kaiawhina waehere AI mō te ngāwari me te tere, ehara i te mea mō te whakaiti i te mata o te whakaeke.
I roto i te mahi, ka hua ake tēnei i te whakaurunga o te whakawhirinakitanga kaha. Ka tāpirihia he whare pukapuka hou hei utu mō te whakamahi anō i ngā mahi o nāianei, ngā whakawhirinakitanga whakawhiti whakawhanui puku, me te tuwhera pūtake te whakahaere whakawhirinakitanga ka tauhohe, kaua e āta whakaarohia. I roto i te wā, ka ngaro te kaha o ngā tīma ki te whakaaroaro mō tā rātou e whakahaere nei.
Ehara tēnei i te take akuaku noa iho. Ia whakawhirinakitanga hou ka puta mai he mōrearea atu ki te mekameka tuku pūmanawa, he whakaaro whakawhirinaki hou, me ngā whai wāhitanga hou mō ngā whakaekenga mekameka tuku pūtake tuwhera. Ina mutu te whakawhirinakitangacisKa aunoatia, ka arotakehia hoki ngā iona mā te papaku noa iho, ka noho hei tūponotanga ā-pūnaha, kaua hei tūpono noa.
Mena kei te tere ake te tipu o tō kauwhata whakawhirinakitanga i te kaha o tō tīma ki te whakamārama, ehara tēnei i te raruraru taputapu; engari he raruraru whakawhirinaki.
Ngā Kaiawhina Whakawaehere AI, te Haumarutanga, me te Hinga o te Arotake
Ko tētahi atu momo rahunga i kōrerohia ko te memeha haere o te arotake ā-hoa i te aroaro o te waehere i hangaia e te AI. Hei kaiawhina waehere AI, ehara i te mea ko te werohanga tere, ko te whakamahi hē rānei i te tauira te kaupapa o te haumarutanga; engari ko te nui o ngā arorau kāore anō kia arotakehia e uru ana ki ngā pūnaha whakaputa.
He nui, he ōrite, he uaua hoki te arotake i ngā huringa i hangaia e te AI i raro i te pēhanga o te wā. Nō reira, ka papaku, ka tohu rānei te arotake a ngā hoa. Ka tangohia e tēnei hinganga puku tētahi o ngā mana whakahaere tino whai hua i roto i software supply chain security.
Ehara i te mangere o ngā kaiwhakawhanake te raruraru. Ko te hē o te rere o te mahi. Ina utua te tere, ā, ina whiua te waku, ka ngoikore haere ngā mana whakahaere haumarutanga AI me ngā pūmanawa e whakawhirinaki ana ki te aro o te tangata. Kāore e hiahiatia ana e ngā kaiwhakaeke te karo i te arotake mena kāore te arotake e mahi hei arai.
He maha ngā tīma e whakaaro ana kei te whai hua tonu te arotake nā te mea kei te mau tonu te tukanga. He iti ake te hunga e pātai ana mēnā kei te whai hua tonu hei whakahaere whai tikanga.
Ngā Mōkihi Pūtake Tuwhera Kino me te Pūrākau o te Rongonui
Ko te whakapono whānui mō te whakahaere whakawhirinakitanga pūtake tuwhera ko te haumaru ake o ngā kaupapa rongonui. Inaa, he maha ngā wā ka piki ake te rongonui. Ko ngā whare pukapuka e whakamahia whānuitia ana he whāinga nui mō ngā whakaeke mekameka tuku puna tuwhera, i muacisnā te mea ka puta he pānga whānui ki te heke mai i te whakararuraru.
He maha ngā kaupapa rongonui e whakahaerehia ana e ngā tīma iti, e ngā tāngata takitahi rānei. Ahakoa ka kitea ngā raruraru, ka noho tonu ngā mōkihi pūtake tuwhera kino mō ngā hāora, ngā rā rānei i mua i te tangohanga. I taua wā, ka haere tonu ngā whakahaere ki te horomi i aua mea mā roto i ngā hanganga aunoa.
Ka whakakaha ake tēnei whakaroa i te hiahia mō te mahi matatau software supply chain security ngā mana whakahaere. Kāore e ranea te whakawhirinaki noa ki te rongonui, te ingoa pai, te mahi rēhita rānei ina pāngia ana e te mōrearea o te mekameka tuku pūmanawa hou.
Kāore te kupu "e whakamahia whānuitia ana" i te rite ki te "e tiakina kaha ana", ā, ko te whakaaro pērā tētahi o ngā whakaaro hē e mau tonu ana i roto i te mekameka tuku.
Te Pūtake o ngā Mekameka Tuku Pūmanawa me te Haumarutanga AI
I roto i te kōrero, i puta ake te hiahia mō te pūtake mai i roto i ngā mekameka tuku pūmanawa. I roto i ngā taiao āwhina-AI, ka pōuri te tohutoro. Ka taea te whakaputa waehere e tētahi tauira, te whakarerekē e te tangata, te whakakotahi mā te aunoatanga, me te whakatinana me te kore he kawenga mārama.
Ki te kore he pūtake ka taea te whakamana, ka akiakihia ngā whakahaere ki te whakawhirinaki puku ki ngā taonga tuku iho. Me neke te haumarutanga AI mai i te whakawhirinaki ki te manatoko: ngā taonga tuku iho kua hainatia, build attestations, me ngā takenga mai ka taea te whai. Ahakoa kāore te pūtake e ārai i ngā whanonga kino, ka whakaitihia te koretake me te whakawhāiti i te kaha o te kaiwhakaeke.
E pā ana tēnei ki ngā tauira, ngā raraunga, me te waehere. I roto i te whanaketanga pūmanawa e whakahaerehia ana e te AI, ko te pūtake he whakaritenga taketake mō te haumarutanga AI me te pūmanawa.
SBOM me te Haumarutanga AI i roto i te Ao Hou Pipelines
Tuhinga o mua SBOM ā, ko te haumarutanga AI tētahi atu kaupapa huna. SBOMka whakaratohia e s te tirohanga ki ngā kauwhata whakawhirinakitanga, engari kāore e ranea te tirohanga noa iho. I roto i ngā taiao e whakamahia nuitia ana e te AI, SBOMMe whanake kia kore e hopu noa i ngā whare pukapuka, engari kia hopu hoki i ngā tauira, i ngā mahi hanga, me ngā mahi aunoacisngota.
Ka honoa ana ki te tātari whanonga me te pūtake, SBOM me te haumarutanga AI ka noho hei taputapu kaha mō te whakaiti i te mōrearea o te mekameka tuku pūmanawa. Mā ēnei ka taea e ngā whakahaere te kite i ngā huringa ohorere, te whakaaroaro mō te pānga, me te urupare pai ake ki ngā whakaekenga mekameka tuku pūtake tuwhera.
CI/CD Pipeline Security I raro i te Pēhanga Aunoatanga
I te pae hopea, CI/CD pipeline security i puta mai hei papa whakahaere matua. Pipelinekei te piki haere te mahi a ngā pūnaha AI i ngā mahi kua tūtohutia, kua whakaohokia rānei. Mena ko ēnā pipelineNā te mea kāore i te kaha ngā mana whakahaere tuakiri, te manatoko taonga tuku iho, me te whakatinanatanga o ngā kaupapa here, ka noho hei wāhi whakauru pai mō ngā kaiwhakaeke.
Te ngoikore CI/CD pipeline security ka taea e ngā mōkihi pūmanawa tuwhera kino te pā ki ngā pūnaha whakaputa me ngā taiao kaiwhakawhanake me ngā hanganga hanga. I te pikinga ake o te aunoatanga, pipelineme whakaaro ki ngā rawa uara nui i roto i software supply chain security ngā hōtaka.
Mātakihia te Kōrero SafeDev
Ki te hiahia koe ki te whakarongo ki ēnei māramatanga katoa mai i ngā kaimahi e hanga ana i te mara, mātakihia te whakaaturanga katoa Kōrero Haumaru: Pūtake Tuwhera, AI me te Mata Whakaeke Hou: Waehere Patu, Parenga Atamai Ake, whakaatu Roman Zhukov (Pōtae Whero), Leon Johnson (TikTok), a Luis Rodríguez Berzosa (Xygeni).
Ngā Pānga Whai Hua mō te Haumarutanga o te AI me Software Supply Chain Security
Ko ngā pānga mahi o ēnei panonitanga ka horapa atu i tua atu i ngā taputapu. Me mārama ngā whakahaere ko te haumarutanga AI, te haumarutanga AI me te pūmanawa, me software supply chain security kua honoa hohonu inaianei. DecisKo ngā mea i whakaarohia i mua he iti te mōrearea, ngā whakahoutanga whakawhirinakitanga, te whakaputa waehere, me te aunoatanga, kei te mau tonu ināianei he mōrearea nui ki te mekameka tuku pūmanawa, inā koa kacisKa hangaia pukutia ngā iona e ngā taputapu, kaua e te tangata.
I te wā o te SafeDev Talk, i whakarāpopototia tēnei kaupapa kia poto. E ai ki tētahi kaikōrero, Ina whai wāhi ngā pūnaha AI ki te whakawhanaketanga pūmanawa, kāore ngā tīma haumarutanga e tiaki noa i te waehere; kei te tiaki rātou i tecisngā iona. Kāore te aunoatanga e tango i te kawenga; ka tohatoha anōtia.
I roto i te mahi, ko te tikanga o tēnei ko te whakahoki mai i te whakaaro nui ki te wāhi kua riro te ngāwari. Me whai whakaaro te whakahaere whakawhirinakitanga pūtake tuwhera ki ngā whanonga e whakahaerehia ana e te AI, kaua ki te whakaaro noa ki te whakaaro o te tangata. Kāore e taea te whakaaro ki te mōrearea whakawhirinakitanga hei mahi arotake noa iho.cise. CI/CD pipeline security me whakamana te manatoko, kaua e whakaaro he pai te whakaurunga. Ā, me neke te pūtake mai i ngā mekameka tuku pūmanawa mai i te wawata ki te turanga.
Ko tētahi atu tirohanga mai i te kōrero ko te tere tonu kāore i te noho pūmau. Ko te nuinga o ngā rahunga o te mekameka tuku taonga ehara i te mea nā te mate kino kotahi.cision, engari mai i ngā kōwhiringa aunoa iti maha kāore i whakaaetia e tetahi. He mea o mua tēneiciste take i rahua ai ngā tauira whakawhirinaki tuku iho i raro i te whanaketanga pūmanawa e whakahaerehia ana e te AI.
Kāore tēnei e kī ana me whakarērea te pūtake tuwhera, te AI rānei. Engari, e whakaae ana ki tā rātou tūranga matua i roto i te hangarau hou. Engari ki te kore e whanake haere ngā whakaaro haumarutanga, ka tūpono ngā whakahaere ki te tuku i te aunoatanga hei tautuhi i te whakawhirinaki mā te taunoa.
Hei Whakamutua ...
He huarahi whai hua hei whakaaroaro mō tēnei panonitanga koia tēnei software supply chain security ehara i te mea ko te tiaki i ngā taonga tuku iho anake. Engari ko te tiaki i decisngā ara katoteI roto i tētahi ao e āwhinahia ana e te AI, ko ngā pātai haumarutanga nui rawa atu ehara i te mea ko "He ngoikore tēnei wāhanga?" engari ko "He aha i whakaurua mai ai tēnei, nā wai, nā te aha rānei, ā, i raro i ēhea here?" Ko ngā whakahaere e urutau ana ki tēnei anga e kore e whakakore i te mōrearea, engari ka iti ake te ohorere ki a rātou.
