Sabata yatha, gulu la Xygeni linali pa OWASP Global AppSec EU 2026 ku Vienna, komwe Akatswiri opitilira 800 achitetezo cha pa intaneti anasonkhana ku Austria Center pa chikondwerero cha zaka 25 cha OWASP. Masiku awiri pa chiwonetserochi, zokambirana zambiri ndi CISOs, atsogoleri a AppSec, ndi mainjiniya a DevSecOps, ndi chizindikiro chimodzi chomveka bwino: kuteteza unyolo wopereka mapulogalamu kwalowa mu gawo latsopano, ndipo mabungwe ambiri sali okonzeka kuchita zimenezo.
Izi ndi zomwe tinaona, zomwe tinawonetsa, komanso zomwe makampaniwa akutiuza.
Zimene OWASP Inayambitsa ku Vienna
Chilengezo chachikulu pamsonkhano wa chaka chino chinali OWASP AISVS 1.0, yomwe idatulutsidwa pa June 24, 2026, panthawi ya chochitikacho. standard Ili ndi zofunikira 514 zotsimikizika m'machaputala 12 zomwe zikuphatikiza chilichonse kuyambira kulowetsedwa mwachangu mpaka chitetezo cha MCP. Mosiyana ndi njira zoyendetsera ntchito monga NIST AI RMF kapena ISO/IEC 42001, zofunikira zonse za AIVS zimalembedwa kuti ziwunikidwe, zipambane kapena zilephere. Ndi chitsimikizo choyamba chachitetezo choyendetsedwa ndi anthu ammudzi komanso choyesedwa. standard yopangidwira makina a AI, yopangidwa motsatira OWASP ASVS, golide standard chitetezo cha mapulogalamu apaintaneti..
Kupatula pa AISVS, gawoli linawonetsa komwe chidwi cha anthu ammudzi chasinthira. Nkhani zokhudzana ndi chitetezo cha mapulogalamu ogwiritsidwa ntchito ndi anthu, chitetezo cha MCP, njira zotetezera zoperekera mapulogalamu, kuzindikira AI yamthunzi, komanso kuyesa mapulogalamu a LLM popanga zidatenga gawo lalikulu pa nthawiyo. OWASP LLM Top 10, Ma Apps Top 10 a Agentic, ndi MCP Top 10 si ma framework atsopano; akupezeka pa intaneti standardzomwe mabungwe ambiri sanafotokozebe momwe angakhudzire nazo. Vienna inapangitsa kuti kusiyana kumeneko kuonekere.
Zimene Xygeni Inaonetsa ku Booth G-08
Tinagwiritsa ntchito masiku awiri a msonkhanowu kusonyeza chinthu chomwe makampani akupempha kwambiri koma chomwe sichikuwoneka kawirikawiri: momwe mungapezere, kupeza, ndikukhazikitsa chitetezo mu AI yonse yomwe magulu anu amagwiritsa ntchito popanga, osati ma code omwe amapanga okha.
Kuyamba kwa Xygeni AI Inventory ku Vienna kunawonetsa malo onse owukira a AI a bungwe omwe adapangidwa nthawi yeniyeni, mtundu uliwonse, wothandizira, seva ya MCP, ndi chida cholembera ma code a AI, ndi zigoli zoopsa, ma graph aubwenzi, ndi AI-BOM yotumizidwa kunja okonzeka kwa olamulira ndi enterprise Kwa alendo ambiri omwe anabwera ku malo osungiramo zinthu zakale, inali nthawi yoyamba kuona malo awo owukira a AI akuonedwa ngati zinthu zokonzedwa bwino komanso zowerengeredwa.
AI Dependency Firewall inasonyeza kuti Shield inatseka phukusi la npm loipa pamalo oyambira opanga mapulogalamu asanayambe kuyika, asanayambe siginecha. Uwu ndi njira yotetezera yoperekera mapulogalamu yomwe yachikhalidwe imagwiritsa ntchito. SCA zipangizo sizingapereke, kuzindikira komwe kumagwira ntchito panthawi yolanda, osati phukusi litayamba kale kugwiritsa ntchito script yake ya postinstall.
Makambirano omwe adachitika pambuyo pa ma demos anali ofanana. Magulu ambiri sanathe kuyankha funsoli pazenera: Kodi AI ili kuti mu kompyuta yanu? SDLC?
Zinthu Zitatu Zomwe Expo Floor Inatiuza
Pakati pa zokambirana zambiri zomwe zinachitika pa booth ndi m'makonde, mitu itatu inabwera mobwerezabwereza.
Chitetezo cha MCP ndiye malo atsopano osawoneka bwino
Gulu lililonse lomwe limagwiritsa ntchito othandizira olemba ma code a AI kapena ma workflows a agentic lili ndi ma seva a MCP omwe sanawasunge mokwanira. Ambiri alibe mndandanda wa ololedwa, palibe kuyang'anira khalidwe, komanso palibe gawo lokakamiza pa endpoint ya opanga mapulogalamu. Izi si vuto lalikulu, 5.5% ya ma seva a MCP apagulu ali ndi zolakwika zowononga zida, ndipo 43% ali ndi zofooka zoyambitsa ma command-injection. ASVS 1.0 imapereka mutu wonse ku zofunikira zachitetezo cha MCP, ndipo zokambirana ku Vienna zatsimikizira kuti apa ndi pomwe mafunde otsatira a ziwopsezo zogulitsa zinthu adzafika.
Funso la AI-BOM likuyamba kukhala lenileni
Atsogoleri achitetezo akuyamba kulandira zopempha kuchokera kwa owerengera ndalama ndi enterprise ogula kuti apeze zinthu zonse za AI zomwe zingawerengedwe ndi makina (ma model, ma data sets, ma agents, ma MCP servers, ndi zida zolembera ma code za AI) ndi ubale wawo, zigoli zoopsa, ndi mapu owongolera. Mabungwe ambiri sangathe kupanga imodzi masiku ano. AI-BOM ikukhala m'malo mwa AI-era SBOM, ndipo mabungwe omwe angapangitse bungweli ngati likufuna adzakhala ndi mwayi waukulu wotsatira malamulo ndi kudalirana pamene maudindo owunikira a EU AI Act akufika.
Chitetezo cha mapulogalamu tsopano chikutanthauza kuteteza gulu la AI
Kuwongolera kwachikhalidwe kwa unyolo wogulira (SCA, SBOM mibadwo, chiyambi cha zomangamanga, umboni wa SLSA) zinamangidwa chifukwa cha dziko lomwe anthu ankalemba malamulo ndipo ma phukusi amachokera ku malo olembetsera anthu onse. Mu 2026, othandizira AI commit khodi yokha, ma seva a MCP amachita mafoni a zida m'malo mwa ogwiritsa ntchito, ndipo ma phukusi oipa akupangidwa kuti azitha kugwiritsa ntchito zida za AI mwachindunji. Njira yotetezeka yopezera mapulogalamu yomwe siiphimba malo owukira a AI siilinso yokwanira. Vienna idapangitsa kuti mgwirizanowu uwonekere m'malo mwa ogulitsa, zokambirana zamisonkhano, komanso zokambirana za panjira yolowera.
Zimene Tikuphunzira ku Vienna
OWASP Global AppSec EU 2026 inali mfundo yothandiza kwambiri yowunikira. Makambirano atatu omwe amachitika kawirikawiri pa chiwonetserochi (chitetezo cha MCP, kukonzekera kwa AI-BOM, ndi kuteteza unyolo wonse wa mapulogalamu mu mtundu wa AI wobadwira. SDLC) ndi zokambirana zomwe Xygeni idapangidwira.
Zero Trust idafika pa netiweki, pa mtambo, ndi pa chizindikiritso zaka zapitazo. Moyo wa pulogalamu yopanga mapulogalamu ndi gawo lomwe silinafotokozedwe mokwanira. Popeza ma code opangidwa ndi AI tsopano ndi 40% ya commitm'mabungwe otsogola, komanso ndi ntchito zogwirira ntchito zomwe zikukulitsa malo owukira mwachangu kuposa momwe zida zachikhalidwe za AppSec zingasinthire, kusiyana kumeneku kukukhala vuto lalikulu kwa magulu achitetezo mu theka lachiwiri la 2026.
Ngati simunapite ku Vienna ndipo mukufuna kuona zomwe tinawonetsa ku Booth G-08, pali njira ziwiri zophunzirira mwakuya: phunzirani zambiri. ulendo wazinthu kuona nsanja ikugwira ntchito, kapena buku buku, ndipo tidzakufotokozerani zomwe tidawonetsa pa chiwonetserochi.
Ibibazo
Kodi OWASP AISVS ndi chiyani?
Kutsimikizira Chitetezo cha OWASP AISVS (AI) Standard) ndiye chitsimikizo choyamba cha chitetezo choyendetsedwa ndi anthu ammudzi komanso choyesedwa standard Yopangidwira makina a AI. Yotulutsidwa mu June 2026 ku OWASP Global AppSec EU Vienna, ili ndi zofunikira 514 zomwe zingatsimikizidwe m'machaputala 12, zomwe zikuphatikizapo kukhulupirika kwa deta yophunzitsira, kulowetsa mwachangu, chitetezo cha MCP, kukonzedwa kwa othandizira, unyolo woperekera, ndi zina zambiri. Mosiyana ndi njira zoyendetsera, chofunikira chilichonse chimalembedwa kuti chiziwunikidwe ngati chapambana kapena chalephera.
Kodi unyolo wotetezeka wa mapulogalamu mu 2026 ndi chiyani?
Unyolo wotetezeka wa mapulogalamu mu 2026 umatanthauza kuteteza osati kudalira magwero otseguka okha, CI/CD pipelines, ndi kupanga zinthu zakale, komanso mitundu ya AI, othandizira, ma seva a MCP, ndi zida zolembera ma code za AI zomwe tsopano zayikidwa mu gawo lililonse la chitukuko cha mapulogalamu. Monga othandizira AI commit Ma code okha ndipo ma phukusi oipa akuchulukirachulukira akuyang'ana kwambiri zida za AI, chitetezo cha unyolo woperekera katundu chakula mpaka kuphatikiza moyo wonse wa chitukuko cha agenti.
