An Rarangi taonga AI he rārangi whakahōu tonu o ia rawa AI e rere ana puta noa i tō whakahaere — ngā tauira, ngā pito mutunga e whakamahia ana e te AI, ngā huinga raraunga, ngā kaiawhina waehere AI, ngā tūmau MCP me ngā whakawhirinakitanga AI — me ngā whanaungatanga, ngā mōrearea me ngā rangatira e hono ana i a rātou. I roto i te horopaki haumarutanga, kāore he pānga o tēnei ki te whakahaere taonga whare putunga, taonga rānei; i konei, "Rārangi taonga AI" ko tōna tikanga he mōhio pū ki te AI e whakamahia ana e koe, ki tōna wāhi noho, me ngā mea ka taea e ia te toro atu.
I te horapa o te AI puta noa i ngā wāhanga katoa o te whanaketanga pūmanawa, mai i te whakaputa waehere i roto i te IDE ki ngā kaihoko motuhake e mahi ana i roto CI/CD pipelinekāore te pātai i ēnei rā ko te mea kei roto te AI i tō taiao. Ko te mea tēnā mēnā ka taea e koe te kite. E whakamārama ana tēnei aratohu he aha te rarangi taonga AI, me tōna hononga ki tētahi AI-BOM me te SBOM, he aha atarangi AI kua waiho hei raruraru haumarutanga, me te pehea e hono ai te mahi ki te EU AI Ture, NIST AI RMF a ISO / IEC 42001.
Take take
- Ka whakarārangihia e te rarangi taonga hangarau matatau (AI) ngā tauira katoa, ngā huinga raraunga, ngā kaihoko, ngā tūmau MCP me ngā taputapu waehere AI puta noa i tō huringa ora pūmanawa, ehara i te mea ko ērā kua whakaaetia e te hangarau mōhiohio anake.
- Atarangi AI, ko te AI i whakamahia me te kore he kāwanatanga, koinei te tikanga inaianei, ehara i te mea rerekē: i roto i tētahi rangahau i te tau 2026 mō ngā kaiārahi haumarutanga, ko 19% o ngā whakahaere i kī mai kua kitea katoatia te wāhi me te āhua o te whakamahinga o te AI.
- An AI-BOM (Pire Rauemi AI) ko te putanga kua rite ki te arotake o tētahi rarangi taonga AI: te uri o te wā AI ki te SBOM.
- Kei te tae mai ngā ture. E hiahiatia ana kia mōhio koe ki te AI e whakamahia ana e koe, e te EU AI Act, e te NIST AI RMF me te ISO/IEC 42001.
- Ko te rarangi taonga te tīmatanga noa iho; ka puta te uara mai i te tatau i ngā mōrearea me te mahi i runga i te iti o ngā rawa e tino hira ana.
He aha te rarangi taonga AI?
Ko te rarangi taonga AI he mahi ki te kimi, ki te whakarārangi me te aroturuki tonu i ia rawa AI e mahi ana puta noa i tō huringa oranga whanaketanga pūmanawa, me ngā mōrearea e pā ana ki ia rawa. Ka whakautua e te rarangi taonga katoa ngā pātai e toru mō ia rawa: he aha te mea, kei hea e whakahaerehia ana, ā, he aha ngā mea ka taea e ia te uru atu?
He whānui ake taua whānuitanga i tā te nuinga o ngā tīma e whakaaro ana. Me kapi i tētahi rarangi taonga AI whai tikanga:
- tauira: ia tauira reo nui me te tauira turanga e whakamahia ana puta noa i te whanaketanga me te whakaputa, me te putanga, te tauwāhi me te māia ki te kitea.
- Datasetsngā raraunga whakangungu, ngā huinga raraunga whakahoki me ngā penapena ira, tae atu ki te whakaaturanga ki ngā horopaki paitini me te turuturu raraunga.
- Agents: ngā pūnaha motuhake e mahi ana i ngā mahi i roto i tō taiao, pērā i te whakatuwheratanga pull requests, te tāuta i ngā whakawhirinakitanga, te pā atu rānei ki ngā hanganga.
- MCP tūmau: Kaupapa Horopaki Tauira ngā tūmau e hono ana i ngā kaiawhina AI ki ngā taputapu o waho, ngā API me ngā pūtake raraunga.
- Ngā taputapu me ngā kaiawhina mō te waehere AI: ngā pairati-ā-ringa me ngā whakaurunga IDE e whakaputa ana i te waehere, whakaarohia ngā whakawhirinakitanga me te taunekeneke ki ngā putunga.
- Ngā anga hangarau mohioLangChain, LangGraph, ngā tūmau kaihoko me ētahi atu paparanga whakarite e hono ana i ngā tauira ki ngā taputapu me ngā raraunga.
- Ngā whanaungatanga i waenga i ngā rawa: ngā hononga i waenga i ngā tauira, ngā kaihoko, ngā tūmau, ngā huinga raraunga me ngā mea ngaro e hono ana ki a rātou. Mā te kauwhata whanaungatanga ka kitea te mōrearea i roto i te horopaki, kaua hei rārangi papatahi.
Te rarangi taonga AI vs te rarangi rawa AI vs te AI-BOM, me ō rāua rerekētanga mai i tētahi SBOM
Kāore i te tino whānui te whakamahinga o ēnei kupu, nō reira he āwhina te noho matatau ki tecise. He rite tonu te whakaahuatanga o te "rarangi taonga AI" me te "rarangi rawa AI".: te rārangi ora o ngā rawa AI me ō rātou mōrearea. He Ko te AI-BOM te taonga ka taea te kaweake e hangaia ana e te taonga.: he pire rauemi ka taea te pānui e te mīhini ka taea e koe te tuku ki tētahi kaitātari kaute, ki tētahi atu rānei enterprise kaihoko
Ko te huarahi māmā rawa atu ki te mārama ki te AI-BOM ko te whakarite ki te SBOM:
I te mea ka whakauruhia te AI puta noa i te SDLC, kei te tino tūāpapa te AI-BOM pērā i te SBOM, ā, kei te piki haere te whiwhinga tono a ngā kaiārahi haumarutanga mai i ngā kaitātari kaute me enterprise ngā tīma hokohoko mō tēnei taonga tuturu.
He aha te hiranga o ngā rarangi taonga AI i nāianei
E toru ngā mana kua huri i ngā taonga AI mai i te mea pai ki te mea nui.
- Tuatahi, kei te tuhi te AI i ngā waehere haumaru kore i te tauine nui. E kitea tonutia ana e ngā rangahau motuhake he nui te wāhanga o ngā waehere i hangaia e te AI e haere tahi ana me ngā ngoikoretanga. I kitea i roto i te rangahau NYU/Copilot taketake a Pearce et al. tata ki te 40% o ngā kaupapa i hangaia he ngoikore haumarutanga, me ngā wāhi whakamātautau nui hou ake i te ara kotahi: Ko te tātaritanga a Veracode mō te tau 2025 puta noa i te 100+ tauira i kitea anake 55% o te waehere i hangaia e te AI he haumaru. Ki te kore koe e mōhio ko wai ngā kaiawhina e whakaputa ana i te waehere i roto i tō pipelines, kāore e taea e koe te whakahaere i taua mōrearea.
- Tuarua, kua huri te mekameka tuku pūmanawa hei mata whakaeke AI. I te marama o Hepetema 2025, Shai Hulud, te kutukutu npm tuatahi e horapa ana i a ia anō, i huri i ngā mīhini kaiwhakawhanake hei tikanga tohatoha, e horapa ana puta noa i ngā rau o ngā mōkihi. I te marama o Poutū-te-rangi 2026, i takahia e ngā kaiwhakaeke axios, he mōkihi me te tata ki te 100 miriona tango ia wiki, e whakaputa ana i ngā putanga paitini i tukua mai ai he torōna urunga-mamao. Ka tau ngā whakaeke pēnei i ēnei ki te paparanga i waenganui i te AppSec tuku iho me te taputapu pito: te paparanga i hangaia ai he rarangi AI hei whakamārama.
- Tuatoru, kei te turuturu ngā mea ngaro me ngā tohu mātauranga mā roto i te AI. I pūrongohia e te GitGuardian's State of Secrets Sprawl 2026 kua piki ake ngā turuturu o ngā mea ngaro o te ratonga AI i te 81% i ia tau, ā, i āwhinahia e te AI commits leak secrets i te rua pea o te reiti tūāpapa. Ko ia tauira, kaihoko, tūmau MCP rānei kāore i te whai tuhinga he ara pea ki te whiwhi tohu.
Ka mutu te AppSec tuku iho i te putunga raraunga, ā, kāore e mārama he aha te tauira. Ka mātakitaki ngā taputapu pito i te pūnaha whakahaere engari kāore e mārama ki ngā mōkihi, ki ngā tūmau MCP, ki ngā kaiawhina AI rānei. Ko te āputa i waenganui i a rātou te wāhi e kohia ai te mōrearea AI, ā, ko te rarangi taonga te taahiraa tuatahi ki te kati.
Te wāhi e huna ai te AI: Te atarangi o te AI puta noa i te SDLC
Atarangi AI he pūnaha AI kua tangohia me te kore whakaaetanga ōkawa, te whakahaere rānei: te pairati takirua i whakahohea e te kaiwhakawhanake i te wiki kua hipa, te tūmau MCP e rere ana i runga i te pona, te tauira i tangohia tika mai i te pokapū tūmatanui ki tētahi kaupapa taha. Ehara i te mea he take taha. I roto i tētahi rangahau i te tau 2026 o te 400+ ngā kaiārahi haumarutanga, koia anake 19% i kī mai he māramatanga katoa ki te wāhi me te āhua o te whakamahinga o te AI puta noa i tā rātou whakahaere, i te mea ko te nuinga kua whakamahi, kua whakamātau rānei i ngā kaiawhina waehere AI.
Ko te AI atarangi tino uaua ki te kimi ko te AI i roto i te huringa ora o te pūmanawa, nā te mea he onge te kitea i roto i te papatohu kapua:
- I kumea ngā tauira me ngā whare pukapuka AI ki roto i ngā putunga hei whakawhirinakitanga.
- Ngā kaiawhina waehere AI kua whirihorahia mō ia kaiwhakawhanake, mō ia IDE.
- Ngā tūmau MCP me ngā kōnae ture e rere ana i runga i ngā pito mutunga o ngā kaiwhakawhanake.
- Ngā rerengamahi a te kaiwhakahaere e tuwhera mārire ana pull requests te tāuta rānei i ngā mōkihi.
Koia te take kāore e ranea te kimi kapua anake. Me uru atu tētahi rarangi AI tino oti ki ngā taiao waehere me te hanga (te pona a te kaiwhakawhanake, te putunga, te pipeline), ehara i te kapua whakaputa anake.
Ngā mea e tika ana mō te AI-BOM
Mā te AI-BOM kua rite ki te arotake ka huri i tō rarangi taonga hei mea ka taea e koe te whakamatau. I te iti rawa, me whakauru atu:
- Ngā rawa AI katoa: ngā tauira, ngā huinga raraunga, ngā kaihoko, ngā tūmau MCP, ngā taputapu waehere AI.
- Te momo rawa, te tauwāhi me te māia ki te kitea mō ia rawa.
- Te pūtake me ngā whakawhirinakitanga (nō hea te tauira, te wāhanga rānei).
- He taumata mōrearea mō ia rawa, e ahu mai ana i ngā ara whakaeke motuhake ki te AI.
- Te mahere ture ki te EU AI Act, NIST AI RMF me te ISO/IEC 42001.
- He hōputu ka taea te kaweake, ka taea hoki te pānui e te mīhini mā ngā kaitātari kaute me ngā kiritaki.
Ko ngā whakahaere e taea ana te whakaputa i tētahi AI-BOM ina tonoa, ka whiwhi i te painga tūturu mō te tutuki i ngā whakaritenga me te whakawhirinakitanga i te pakeketanga o ngā herenga arotake AI.
Te rarangi taonga me te tutuki i ngā whakaritenga o te AI: EU AI Act, NIST AI RMF me ISO/IEC 42001
Kāore tetahi o ngā anga matua e whakaingoa ana i te "rarangi taonga AI" hei tūemi raina, engari he tino uaua ki te whakatutuki i ia mea me te kore taua mea. Kāore e taea te tuhi, te whakarōpū, te whakahaere rānei i ngā pūnaha AI kāore e kitea e koe.
He kōrero mō te wā: i whakahoutia te whakatinanatanga o te Ture AI a te EU e te whakaaetanga "Digital Omnibus" o Mei 2026, i whakaroa i te nuinga o ngā herenga mōrearea ki Hakihea 2027, me te pupuri tonu i ētahi tohu nui o te 2 o Ākuhata 2026 (ngā mahi mārama, ngā mana whiu GPAI). Whakaarohia ngā rā tuturu hei whāinga neke, me te whakaū ki ngā puna matua o te EU. Engari he mārama te ahunga o te haere, ā, ko te rarangi taonga te mea nui mō te katoa.
Me pēhea te hanga me te pupuri i tētahi rarangi taonga AI
Ehara i te mea he arotake kotahi te hanga rarangi taonga, engari he whakatū i tētahi tukanga tonu, nā te mea ka huri tonu ngā rawa AI: ka whakamahia he tauira hou, ka whakatinanahia he kaihoko hou, ka whirihorahia he tūmau MCP hou, ā, he maha ngā wā kāore he whakaaetanga.
He huarahi mahi:
- Kimihia aunoa puta noa i te waehere, te hanga me te kapua. Ka tawhito ngā ripanga tātai ā-ringa i roto i ngā rā. Me rere tonu te Discovery, me toro atu ki roto SDLC, ehara i te wā whakahaere anake.
- Whakarōpūtia, ā, maheretia hoki ngā whanaungatanga. Te momo tuhinga, te tauwāhi, te pūtake me te mea nui, te hononga o ia rawa ki ētahi atu me ngā mea ngaro.
- Tātarihia te mōrearea i roto i te horopaki. Kāore he āwhina o te rārangi papatahi o ngā rau kitenga; whakaritea ngā mea matua mā runga i ngā mea ka taea te toro atu, te mea ka taea te whakamahi, me ngā mea nui hoki mō te pakihi.
- Tautapahia te mana pupuri. Me whai rangatira whai kawenga ia rawa.
- Kia ora tonu, kia taea ai te kaweake. Puritia hei taonga tonu ka taea te whakaputa i tētahi AI-BOM ina hiahiatia.
Ngā mea hei tirotiro mā te pūmanawa rarangi taonga AI
Mena kei te arotake koe i ngā taputapu, koinei ngā āheinga e wehewehe ana i te pūmanawa rawa AI tūturu mai i te rārangi tūmau:
- Mārama ki ngā momo rawa e pā ana ki te AI (ngā tauira, ngā kaihoko, ngā tūmau MCP, ngā huinga raraunga), ehara i te mea ko ngā mōkihi me ngā whare pukapuka anake.
- Ka tae atu ki roto i te SDLC, te tūhura i te AI i roto i te waehere me ngā pito mutunga a ngā kaiwhakawhanake, ehara i te mea i roto i te kapua anake.
- Ngā whanaungatanga mapi, ehara i te mea ko ngā rawa takitahi anake, nō reira ka kitea te mōrearea i roto i te horopaki.
- Ngā kaute mōrearea i runga i ngā ara whakaeke motuhake a te AI (werohanga tere, MCP koretake, kaha rawa), ehara i te mea ko te kaha o te CVE anake.
- Ka rere tonu, te hopu i te AI hou e āhua ana.
- Ka whakaputa i tētahi AI-BOM kua rite mō te arotake e makona ai ngā kaitātari me ngā enterprise hokonga.
- Hono ana i ngā taonga ki te whakatinanatanga, kia taea ai e koe te mahi i runga i tāu i kite ai.
Mai i te rarangi taonga ki te mahi: te tiaki i ngā mea ka kitea e koe
Ko te kitenga te taahiraa tuatahi; ko te tuarua ko te mārama ko ēhea rawa he mōrearea tūturu, nā te mea ko te nuinga kāore e pērā. Ko te whāinga he neke atu i ngā mano tini o ngā kitenga mata ki te hunga iti ka taea te whakararu i ngā pūnaha, raraunga, mahi rānei: ko ēhea e whakamahia ana, e whakaae ana ki ngā whakaurunga kāore i te pono, e taea ana te whakamahi, e mau ana te urunga tairongo, ā, e pā ana ki ngā rawa whakaputa, ngā rawa whakahaere rānei.
Koinei te wāhi e whakahaerehia ai te Whakahaere Tūnga Haumarutanga AI (AI-SPM) te tango ake: te tango i te rarangi taonga, te tatau i te mōrearea i te ara whakaeke AI, te whakarite kia rite ki te ture, me te whakaputa i te AI-BOM. Koinei anō te wāhi e tūtaki ai te rarangi taonga ki te whakatinanatanga: te aukati i ngā whakawhirinakitanga kino i mua i te tāutanga, te whakakore i ngā tūmau me ngā tauira MCP kāore i whakaaetia, me te pupuri i ngā pito mutunga kua takahia i mua i te horapa o tētahi aituā.
At Xygeni, koinei te tauira e hangaia ana e mātou: te rarangi taonga AI tonu me te AI-BOM mā te AI-SPM, te kimi pūmanawa kino e hopu ana i ngā mōkihi kino i mua i te wā e puta ai he waitohu (MEW, Whakatūpato Moata Pūmanawa Kino), me te whakatinanatanga o ngā kaupapa here i te pito mutunga o te kaiwhakawhanake mā Xygeni Shield. E hangai ana te kimi ki te OWASP Top 10 mō ngā Taupānga LLM, te OWASP Top 10 mō ngā Taupānga Agentic me te OWASP MCP Top 10. Ahakoa te huarahi e whiriwhiria e koe, ka mau tonu te mātāpono: Kāore e taea e koe te tiaki i ngā mea kāore e kitea, ā, mā te rarangi taonga hangarau mohio ka tīmata te kitea.
FAQs
He aha te rerekētanga o tētahi AI-BOM i tētahi SBOM?
An SBOM ngā rarangi ingoa pūmanawa tuwhera-pūtake me ngā pūmanawa tuatoru, i tohua i runga i te kaha o te CVE. Ka rarangi ingoa AI-BOM i ngā rawa motuhake ki te AI (ngā tauira, ngā kaihoko, ngā tūmau MCP, ngā huinga raraunga) me te whakatauranga mōrearea motuhake ki te AI me te mahere ture. I te horapa o te AI puta noa i te SDLC, kei te tino tūāpapa te AI-BOM pērā i te SBOM.
He aha te Shadow AI, ā, me pēhea te kimi i tēnei mea?
Ko te Shadow AI he AI kua tangohia me te kore whakaaetanga ōkawa, te kore whakahaere rānei: he pairati tautoko kua whakahohea, he tūmau MCP ā-rohe, he tauira i tangohia mai i tētahi pokapū tūmatanui. Ka kitea e koe mā te rarangi taonga aunoa tonu e toro atu ana ki te waehere, te hanga pipelineme ngā pūwāhi mutunga o ngā kaiwhakawhanake, ehara i te kapua whakaputa anake te wāhi kāore e puta te nuinga o te atarangi AI.
E hiahiatia ana he rarangi taonga AI e te Ture AI a te EU?
Kāore te Ture AI a te EU e whakahua mārama ana i te "rārangi taonga AI", engari kāore e taea te whakatutuki i ana mahi tuhi, whakarōpū me te rēhitatanga mō ngā pūnaha mōrearea nui me te kore he pūnaha. Pērā anō hoki mō te NIST AI RMF (Map function, Govern 1.6) me te ISO/IEC 42001, e hiahia ana kia mau tonu he rārangi taonga o ngā pūnaha AI.
He aha te AI-SPM?
Ko te Whakahaere Tū Haumarutanga AI (AI-SPM) he mahi o te kimi tonu i ngā rawa AI, te tatau i ō rātou mōrearea i te ara whakaeke AI, te hono atu ki ngā ture, me te whakaputa i tētahi AI-BOM. Ka whakawhānui ake i te whakaaro whakahaere tū (e mōhiotia ana e te CSPM me te DSPM) ki ngā rawa me ngā momo whakaeke motuhake a te AI.
Kia pēhea te auau o te whakahōu i tētahi rarangi taonga AI?
Kei te haere tonu. Ka huri haere ngā rawa o te AI i ia rā i te mea ka whakamahia e ngā tīma ngā tauira hou, ka whakatinanahia ngā kaihoko hou, ka whirihorahia hoki ngā tūmau MCP hou, i te nuinga o te wā kāore he whakaaetanga ōkawa. Ka tawhito te matawai wā-tūturu i roto i ngā rā, nō reira ka rere tonu te pūmanawa rarangi taonga AI whai hua hei tukanga tonu, kaua hei arotake kotahi.
Me pēhea taku rarangi i te AI e whakamahia ana i roto i te waehere pūtake?
Ko te rarangi i te AI i roto i te waehere ko te kimi i ngā tauira AI me ngā whare pukapuka i tangohia mai hei whakawhirinakitanga, ngā kaiawhina waehere AI i whirihorahia mō ia kaiwhakawhanake, me ngā tūmau MCP, ngā kōnae ture rānei e rere ana i te rohe. Me kimi tēnei e mahi ana i roto i te SDLC (ngā whare putunga, hanga pipelines me ngā pūwāhi mutunga a ngā kaiwhakawhanake) kaua ki roto i ngā papatohu kapua anake.
