Ngā Kaupapa Matua o te Huihuinga OWASP AppSec 2025: Te Whakatikatika Aunoa me te AI me tua atu
I te wiki kua taha ake nei, i tae atu mātou ki te Huihuinga OWASP AppSec 2025, tētahi o ngā huihuinga haumarutanga tukutuku e tino tumanakohia ana o te tau. Hei wāhanga o te kaupapa whānui OWASP AppSec raupapa, i huihui mai te huihuinga i ngā tohunga, ngā kaihoko, me ngā kaimahi ki te tūhura i te aranga ake o te whakatikatika aunoa me te AI, te whakapuaki i ngā rautaki haumarutanga hou, me te whakamārama i ngā taputapu hou e hanga ana i te heke mai o te tuku pūmanawa haumaru.
Ngā Whakaaturanga Hua Ora e Whakaatu ana i te Whakatikatika Aunoa me te AI
Heoi anō, i te wā o te OWASP Global AppSec, i whai wāhi mātou ki te hono atu anō ki te tini o ā mātou kiritaki, me te tūtaki ki ngā tīma hou e tūhura ana i a Xygeni mō te wā tuatahi. Ko tā mātou whakaaturanga ora o te Auto Remediation tētahi o ngā kaupapa matua mō te hunga e hiahia ana ki ngā tono mahi a te AI i roto i te DevSecOps.
He aha te Whakatikatika Aunoa?
Ko te tikanga, Te Whakaora Aunoa ko tā mātou miihini whakatika e whakahaerehia ana e te AI e tātari ana i te waehere, e kite ana i ngā ngoikoretanga, ā, e whakaputa ana i ngā whakatikatika haumaru i roto i tōu CI/CD pipelineNō reira, mā te whakauru atu ki te tukanga whanaketanga, ka āwhina i te whakaiti i te wā tātaritanga me te whakaiti i te ngenge mataara. He tauira mārama tēnei o te kaha o te AI i roto i te DevSecOps ki te whakaiti i ngā mahi ā-ringa me te whakateretere i te urupare haumarutanga.
He Arokite o Smarter SCA me te Mōrearea Whakatikatika: Whakapai Ake i te Haumarucisions
I OWASP Global AppSec, i whakaatuhia e mātou te mea hou a Xygeni Mōrearea Whakaora āhuatanga mo SCA, i hangaia hei āwhina i ngā tīma ki te whakapai ake i te haumaru akecisngā āhuatanga. Ka whakaatuhia ngā take kua whakatikahia, ka tohua he tohu mōrearea hou, ā, ka whakamāramahia ngā huringa nui puta noa i ngā putanga e wātea ana. Engari i te whakamahi matapo i te papaki hou, ka whiwhi ngā kaiwhakawhanake i tētahi taunakitanga atamai e whakataurite ana i te haumarutanga me te pumau.
Kia mataara mai! Kei te haere mai ngā whakahōutanga whakahihiri. Kei te hiahia koe kia mōhio tuatahi? Ohauru ki to tatou pānui mō ngā whakahōutanga hua, ngā māramatanga haumarutanga, me ngā arokite motuhake.
Ngā reo mai i OWASP Global Appsec: Te Haumarutanga i te Ao o te AI
I muri i tērā, i uru atu mātou ki te rōpū kua hopukina, arā, ko Ngā Reo mai i OWASP Global AppSec, he wānanga ā-hapori i huihui mai ai ngā kaihoko me ngā kaimahi ki te matapaki i te āhua o te haumarutanga tono hou i te wā o Te Whakatikatika Aunoa me te AI.
I rongo mātou i ngā kōrero a ētahi kaiārahi e rua e aro ana ki te wero mai i ngā koki rerekē:
- Antoine Carossio, kaiwhakaū me te Tumu Whakahaere Matua i Escape, i aro atu ki ngā mōrearea me ngā uauatanga o te tiaki i te waehere i hangaia e te AI.
- Morten Ruud, Kaiwhakahaere Hua i Whakatairanga, i whakapuaki i tētahi tirohanga whānui ake mō te tiaki i ngā tono i tua atu i te IDE a te kaiwhakawhanake, inā koa i ngā taiao wā-oma pēnei i te waea pūkoro.
I whakaatahia e tā rāua tirohanga ngātahi te kaupapa matua o ngā mea e rua OWASP AppSec a OWASP Global AppSecMe whanake te haumarutanga o ngā taupānga i runga anō i te āhua o te hanganga me te whakatinanatanga o te pūmanawa.
Mawhiti – Antoine Carossio: Kei te Tuhituhi (me te Tiaki) te AI i tā Mātou Waehere
Hei tīmatanga, i tūhuratia e Antoine te huarahi e whakarerekē ai te whakatika aunoa me te AI i te hanganga pūmanawa me ngā mōrearea e pā ana ki te AppSec:
- Nā te mea he nui ake ngā waehere e whakaputaina ana e te AI, he maha atu anō hei whakamātautau—me ngā hua teka.
- Nō reira, kei te piki haere te ngenge o te hunga e tūpato ana, ā, kei te whakaroa i te hua o ngā kaiwhakawhanake.
- He uaua ki ngā taputapu tuku iho te whai i te tere o te waehere i hangaia e te AI, ka whakanui ake i ngā āputa haumarutanga.
- Ka tere te tono a ngā anga ture pēnei i te EU AI Act kia mārama te hanga me te arotake i ngā waehere i hangaia e te AI.
I whakanuia e ia te hiahia e tipu haere ana mō:
- Ngā rohe whakawhirinaki i ngā rerengamahi kāore te waehere i tino titoa e te tangata.
- Kōmāmā guardrails e ārai ana i ngā "ngā ngoikoretanga kua oti aunoa".
- Te matawai me te whakamana tonu i te waehere AI, me te rite ki te pūmanawa tuatoru.
Promon – Morten Ruud: Kei tua atu i te Waehere Haumaru
Whai muri i tēnā, i arotahi a Morten ki te tiaki i ngā tono i muri i te whanaketanga, me te hono atu ki ngā whāinga whānui o OWASP AppSec me OWASP Global AppSec: te whakarite i te katoa SDLC i pipeline ki te wā whakahaere.
Ko ngā kōrero matua i puta mai i tana kauhau ko:
- Kāore ngā ngoikoretanga e puta noa i te wā e tuhi waehere ana, engari ka puta i roto i te hanganga, te whakatinanatanga, me te rawa ururua.
- Kāore e taea te tumanako kia noho ngā kaiwhakawhanake hei tohunga mō ngā taiao whakahaere katoa ka pā ki ā rātou tono.
- Ko ngā tūmomo riri i te wā e whakahaerehia ana pērā i te kohi tohu pūkoro, ngā whakaeke paparua rānei, e hiahia ana kia tiakina ngātahitia.
I whakamārama a Morten i te huarahi:
- Ka tiakina e Promon ngā taupānga pūkoro i te wā e whakahaerehia ana mā te ārai-tātari me te tiakitanga i roto i te taupānga.
- Ka whiwhi a Xygeni i ngā wāhanga tōmua o te pipeline me te kitea o te mekameka tuku, te matawai i ngā mea ngaro, IaC ngā haki, me ētahi atu.
ratou whakatau ngātahi i whakaata i tētahi kaupapa matua o te Huihuinga OWASP AppSecKāore ngā tūmomo riri o te ao tūturu e noho puku ana, me te haumarutanga anō hoki. Neke ki ngā Wāhi Katoa ehara i te pepeha; he mea e tika ana.
Kōrero SafeDev e haere ake nei: Te Whakarite i ngā DevSecOps e Mana Ana i te AI
I te wā o te huihuinga, i manaaki mātou i tētahi putanga motuhake o tā mātou 𝑵𝒆𝒙𝒕 𝑺𝒂𝒇𝒆𝑫𝒆𝒗 𝑻𝒂𝒍𝒌 𝑨𝑰𝑷𝒐𝒘𝒆𝒓𝒆𝒅 𝑫𝒆𝒗𝑺𝒆𝒄𝑶𝒑𝒔. 𝑶𝒓𝒄𝒉𝒆𝒔𝒕𝒓𝒂𝒕𝒊𝒏𝒈 𝑺𝒆𝒄𝒖𝒓𝒊𝒕𝒚 𝒂𝒕 𝑪𝒍𝒐𝒖𝒅 𝑺𝒄𝒂𝒍𝒆, hei wāhanga o OWASP Global AppSec, whakaatu Āhiwini Siddhi—Mema Poari Ao o OWASP me te kaitautoko mō ngā Wahine i roto i te Haumarutanga Ipurangi. I arotahi te wānanga ki tētahi kaupapa e tika ana: AI i roto i te DevSecOps me pēhea te whakarite i te haumarutanga puta noa i te SDLC i te tauine kapua.
I roto i te kōrero, i tūhuratia e mātou me pēhea:
- Te Whakatikatika Aunoa me te AI ka whakapai ake i te tere, te tirohanga, me te ōritetanga puta noa i ngā rerengamahi
- Ka taea e ngā tīma whakarite i te mōrearea tūturu mā te whakahaere ngoikoretanga atamai
- Kua taea inaianei te mau pipelinengā taiao s, waehere, me te wā whakahaere maeneene
- He āwhina te whakarite atamai whakaitihia te ngenge mataara mō ngā kaiwhakawhanake me ngā tīma AppSec
- E hangai ana tēnei katoa ki OWASP AppSec ngā mātāpono pēnei i te "Neke ki Mauī" me te "Neke ki Ngā Wāhi Katoa"
Ngā Whakaaro Whakamutunga mō te OWASP AppSec 2025
te Huihuinga OWASP AppSec 2025 i whakaatu i te tere o te whanaketanga o te ao AppSec. Mai i te whakatikatika e whakahaerehia ana e te AI ki te atamai ake SCA me te parepare wā-oma, me whakauru hohonu te haumarutanga hou ki te whanaketanga. Ngā kaupapa pēnei i te OWASP Global AppSec hei whakaatu ko te mahi tahi i waenga i ngā kaihoko, ngā kaiwhakawhanake, me ngā kaitautoko te mea nui hei noho whakamua.
I Xygeni, e whakahīhī ana mātou ki te whai wāhi atu ki ngā taputapu hanga kaupapa e āwhina ana i ngā tīma ki te awhi i te aunoatanga me te tuku pūmanawa haumaru i te tauine kapua.
