I te wiki kua taha ake nei, i te OWASP Global AppSec EU 2026 i Vienna, kei reira 800+ ngā tohunga haumarutanga tukutuku i huihui ki te Austria Center mō te huritau 25 o OWASP. E rua ngā rā i runga i te papa whakaaturanga, he maha ngā kōrerorero ki CISNgā kaiwhakahaere pūnaha whakahaere (OS), ngā kaiārahi AppSec, me ngā miihini DevSecOps, me tētahi tohu mārama: kua uru te haumarutanga o te mekameka tuku pūmanawa ki tētahi wāhanga hou, ā, kāore anō te nuinga o ngā whakahaere kia rite mō tēnā.
Anei tā mātou i kite ai, tā mātou i whakaatu ai, me tā te umanga e kōrero mai nei ki a mātou.
Ngā mea i whakarewahia e OWASP i Vienna
Ko te panuitanga matua i te huihuinga o tēnei tau ko OWASP AISVS 1.0, i tukuna i te 24 o Hune, 2026, i te wā o te huihuinga tonu. Ko te standard Kei roto i tēnei he 514 ngā whakaritenga ka taea te manatoko puta noa i ngā upoko 12 e kapi ana i ngā mea katoa mai i te werohanga tere ki te haumarutanga MCP. He rerekē ki ngā anga whakahaere pērā i te NIST AI RMF, ISO/IEC 42001 rānei, kua tuhia ia whakaritenga AISVS kia tirohia, kia paahitia, kia kore rānei e tutuki. Koinei te manatoko haumarutanga tuatahi e whakahaerehia ana e te hapori, ka taea te whakamātautau. standard i hangaia mō ngā pūnaha AI, i tauirahia i muri i te OWASP ASVS, te koura standard mō te haumarutanga o ngā taupānga tukutuku..
I tua atu i te AISVS, i whakaatahia e te ara wātū te wāhi kua nekehia te aro o te hapori. Ko ngā kōrero mō te haumarutanga tono ā-ringa, te haumarutanga MCP, ngā mahi mekameka tuku pūmanawa haumaru, te kimi atarangi AI, me te whakamātautau i ngā tono LLM i roto i te whakaputanga te nuinga o te kaupapa. Ko te Ngā Tohu Paetahi o OWASP LLM 10, kāore a Agentic Apps Top 10, me MCP Top 10 i te anga hou; kei te ora tonu rātou standardkāore anō kia tuhia e te nuinga o ngā whakahaere ō rātou pānga ki tēnei. Nā Vienna i whakaatu taua āputa.
Ngā Mea i Whakaaturia e Xygeni i te Tūru G-08
I whakamahia e mātou ngā rā e rua o te hui hei whakaatu i tētahi mea e tonoa nuitia ana e te umanga engari kāore i te tino kitea i roto i te mahi: me pēhea te kimi, te whakatau i te taumata, me te whakatinana i te haumarutanga puta noa i te AI e whakamahia ana e ō tīma hei whakawhanake, kaua ko te waehere anake e whakaputaina ana e rātou.
I whakaatuhia i te whakaaturanga tuatahi o Xygeni AI Inventory i Vienna te mata whakaeke AI katoa o tētahi whakahaere i te wā tūturu, ia tauira, ia kaihoko, ia tūmau MCP, me ia taputapu waehere AI, me ngā kaute mōrearea, ngā kauwhata whanaungatanga, me tētahi AI-BOM ka taea te kaweake kua rite mō ngā kaiwhakahaere me enterprise kaihoko. Mō te nuinga o ngā manuhiri ki te whare whakaaturanga, koinei te wā tuatahi i kite ai rātou i tā rātou ake mata whakaeke AI kua whakaatuhia hei rarangi taonga kua whakaritea, ka taea te arotake.
I whakaatuhia e te Pātūahi Whakawhirinakitanga AI te aukati a Shield i tētahi mōkihi npm kino i te pito mutunga o te kaiwhakawhanake i mua i te tāutanga, i mua i te putanga mai o tētahi waitohu. Koinei te mana whakahaere mekameka tuku pūmanawa haumaru e whakamahia ana e te tikanga tuku iho. SCA Kāore e taea e ngā taputapu te whakarato i tētahi kitenga e mahi ana i te wā e tikina ana, kaua i muri i te whakahaerenga o te mōkihi i tana tuhinga i muri i te tāutanga.
He rite tonu ngā kōrero i muri i ngā whakaaturanga. Kāore i taea e te nuinga o ngā tīma te whakautu i te pātai i runga i te mata: kei hea te AI i roto i tōu SDLC?
E toru ngā mea i kōrerotia mai e te papa o te whakaaturanga ki a mātou
I roto i ngā kōrerorero maha i te whare whakaaturanga me ngā ara raro, e toru ngā kaupapa i puta ake i ngā wā katoa.
Ko te haumarutanga MCP te wāhi matapo hou
Kei ia tīma e whakahaere ana i ngā kaiawhina waehere AI, i ngā rerengamahi ā-ringa rānei, he tūmau MCP kāore anō kia tino tātaihia. Ko te nuinga kāore he rārangi whakaae, kāore he aroturuki whanonga, kāore hoki he paparanga whakamana i te pito mutunga o te kaiwhakawhanake. Ehara tēnei i te āwangawanga motuhake, 5.5% o ngā tūmau MCP tūmatanui he hapa e pāngia ai ngā taputapu, ā, 43% he ngoikoretanga weronga whakahau. E whakatapua ana e AISVS 1.0 tētahi upoko katoa ki ngā whakaritenga haumarutanga MCP, ā, i whakaūtia e ngā kōrero i Vienna koinei te wāhi ka tau mai ai te ngaru e whai ake nei o ngā whakaeke mekameka tuku.
Kei te tino tūturu te pātai AI-BOM
Kei te tīmata ngā kaiārahi haumarutanga ki te whiwhi tono mai i ngā kaitātari kaute me enterprise ngā kaihoko mō tētahi rarangi pukapuka ka taea te pānui e te mīhini o ia rawa AI i roto i te whakahaere (ngā tauira, ngā huinga raraunga, ngā kaihoko, ngā tūmau MCP, me ngā taputapu waehere AI) me ō rātou whanaungatanga, ngā kaute mōrearea, me te mahere ture. Kāore e taea e te nuinga o ngā whakahaere te whakaputa i tētahi i ēnei rā. Kei te tere haere te AI-BOM hei whakakapi i te AI-BOM i te wā SBOM, ā, ko ngā whakahaere e taea te whakaputa i tētahi i runga i te tono ka nui te painga ki te tutuki i ngā whakaritenga me te whakawhirinakitanga i te taenga mai o ngā herenga arotake o te EU AI Act.
Ko te tikanga o te mekameka tuku pūmanawa haumaru inaianei ko te tiaki i te paparanga AI
Ngā mana whakahaere mekameka tuku iho (SCA, SBOM (whakatupuranga, takenga hanga, whakamanatanga SLSA) i hangaia mō tētahi ao i tuhia ai e te tangata te waehere, ā, i ahu mai ngā mōkihi i ngā rēhita tūmatanui. I te tau 2026, ko ngā kaihoko AI commit Ka mahi motuhake te waehere, ka whakahaerehia e ngā tūmau MCP ngā karangatanga taputapu mō ngā kaiwhakamahi, ā, kei te hangaia ngā mōkihi kino hei aro tika ki ngā taputapu AI. Kāore i te oti te rautaki mekameka tuku pūmanawa haumaru kāore e kapi i te mata o te whakaeke AI. I whakaatuhia taua whakaaetanga e Vienna puta noa i ngā whare kaihoko, ngā kōrerorero wā, me ngā kōrerorero i te ara.
Ngā mea ka tangohia e mātou mai i Vienna
OWASP Global AppSec EU 2026 he wāhi whakatikatika whai hua. Ko ngā kōrerorero e toru e tino tū ana i te papa whakaaturanga (te haumarutanga MCP, te rite o te AI-BOM, me te tiaki i te mekameka tuku pūmanawa katoa i roto i te AI-taketake SDLC) koia ngā kōrerorero i hangaia ai a Xygeni.
I tae atu a Zero Trust ki te whatunga, ki te kapua, me te tuakiri i ngā tau kua pahure. Ko te huringa ora o te whanaketanga pūmanawa te paparanga kāore anō kia kapi katoa. Inaianei, ko te waehere i hangaia e te AI te 40% o commiti ngā whakahaere matua, ā, me te tere ake o te whakawhānui ake o ngā rerengamahi a te kaiwhakahaere i te mata o te whakaeke i tā ngā taputapu AppSec tuku iho ka taea te urutau, kei te noho taua āputa hei wero matua mō ngā tīma haumarutanga i te haurua tuarua o te tau 2026.
Mena i ngaro koe i Vienna, ā, e hiahia ana koe ki te kite i ngā mea i whakaaturia e mātou i te Booth G-08, e rua ngā huarahi hei tirotiro hohonu ake: tangohia he haerenga hua kia kite i te tūāpapa e mahi ana, pukapuka te demo, ā, mā mātou koe e ārahi i roto i ngā mea katoa i whakaaturia e mātou i te papa o te whakaaturanga.
FAQs
He aha te OWASP AISVS?
OWASP AISVS (Manatoko Haumarutanga AI) Standard) ko te manatoko haumarutanga tuatahi e whakahaerehia ana e te hapori, ka taea te whakamātautau standard I hangaia mō ngā pūnaha AI. I tukuna i te Pipiri 2026 i OWASP Global AppSec EU Vienna, kei roto i tēnei he 514 ngā whakaritenga ka taea te manatoko puta noa i ngā upoko 12, e kapi ana i te pono o ngā raraunga whakangungu, te werohanga tere, te haumarutanga MCP, te whakaritenga ā-ringa, te mekameka tuku, me ētahi atu. Kāore i rite ki ngā anga whakahaere, kua tuhia ia whakaritenga kia tirohia mēnā kua eke, kāore rānei.
He aha te mekameka tuku pūmanawa haumaru i te tau 2026?
Ko te tikanga o tētahi mekameka tuku pūmanawa haumaru i te tau 2026, ehara i te mea ko te tiaki i ngā whakawhirinakitanga pūtake tuwhera anake, CI/CD pipelines, me te hanga taonga tuku iho, engari me ngā tauira AI, ngā kaihoko, ngā tūmau MCP, me ngā taputapu waehere AI kua whakauruhia inaianei ki roto i ia wāhanga o te whanaketanga pūmanawa. Hei kaihoko AI commit I te mea ka mahi motuhake te waehere, ā, ka piki haere te aro o ngā mōkihi kino ki ngā taputapu AI, kua whānui te haumarutanga mekameka tuku ki te whakauru i te huringa whanaketanga ā-ringa katoa.
