Svondo rapfuura, timu yeXygeni yaive pa OWASP Global AppSec EU 2026 muVienna, uko Nyanzvi dzekuchengetedza makombiyuta dzinopfuura mazana masere (800+) vakaungana paAustria Center pamhemberero yemakore makumi maviri nemashanu eOWASP. Mazuva maviri pamusangano wekuratidzira, hurukuro dzakawanda na CISOs, vatungamiriri veAppSec, uye mainjiniya eDevSecOps, uye chiratidzo chimwe chete chakajeka: kuchengetedza cheni yekupa software kwapinda muchikamu chitsva, uye masangano mazhinji haasati agadzirira izvozvo.
Hezvino zvatakaona, zvatakaratidza, uye zviri kutaurwa neindasitiri.
Zvakatangwa neOWASP muVienna
Musoro wezviziviso pamusangano wegore rino waive OWASP AISVS 1.0, yakaburitswa musi wa24 Chikumi, 2026, panguva yechiitiko chacho. standard ine zvinodiwa zvinokwana 514 zvinogona kusimbiswa muzvitsauko gumi nezviviri zvinofukidza zvese kubva pakupinza nekukurumidza kusvika kukuchengetedzwa kweMCP. Kusiyana nehurongwa hwekutonga hwakaita seNIST AI RMF kana ISO/IEC 42001, chinodiwa chega chega cheAISVS chakanyorwa kuti chiongororwe, chipfuure kana kuti chikundikane. Ndiyo yekutanga kuchengetedzwa kunoedzwa nenharaunda. standard yakagadzirirwa masisitimu eAI, akaumbwa achitevedzera OWASP ASVS, goridhe standard kuchengetedza maapplication ewebhu..
Kupfuura AISVS, nzira yemusangano yakaratidza kuti pfungwa dzevanhu dzakachinja sei. Hurukuro pamusoro pekuchengetedzwa kwezvishandiso zvemagetsi, kuchengetedzeka kweMCP, maitiro ekuchengetedza software, kuona mumvuri weAI, uye kuyedza mashandisirwo eLLM mukugadzirwa ndizvo zvakatungamira purogiramu. OWASP LLM Yepamusoro gumi, Agentic Apps Top 10, uye MCP Top 10 hazvisisiri zvirongwa zvitsva; zviri kuitika standardizvo masangano mazhinji asati aratidza kuti anozviwana sei. Vienna yakaita kuti musiyano iwoyo uoneke.
Zvakaratidzwa neXygeni paBooth G-08
Takashandisa mazuva maviri emusangano kuratidza chimwe chinhu chiri kukumbirwa neindasitiri asi chisingawanzoonekwi mukuita: maitiro ekuwana, kuwana, uye kusimbisa kuchengetedzeka muAI inoshandiswa nezvikwata zvako kugadzira, kwete kodhi yazvinogadzira chete.
Kutanga kweXygeni AI Inventory muVienna kwakaratidza nzvimbo yese yekurwisa kweAI yesangano yakarongedzwa panguva chaiyo, modhi yega yega, mumiririri, sevha yeMCP, uye chishandiso chekunyora makodhi eAI, ine mamaki engozi, magirafu ehukama, uye AI-BOM inotumirwa kunze kwenyika vakagadzirira vatongi uye enterprise Vatengi. Kune vazhinji vaishanyira nzvimbo iyi, yaive nguva yekutanga yavakaona nzvimbo yavo yekurwiswa kweAI ichiratidzwa sezvinhu zvakarongwa uye zvinoongororwa.
Firewall yeAI Dependency yakaratidza kuti Shield yaivhara package ye npm yakaipa panzvimbo yedeveloper isati yaiswa, isati yaiswa siginecha. Uku ndiko kudzora kwakachengeteka kwesoftware supply chain uko tsika dzechinyakare dzinoita. SCA zvishandiso hazvigone kupa, kuona kunoshanda panguva yekutorwa, kwete mushure mekunge pasuru yatotanga kushandisa script yayo yepostinstall.
Hurukuro dzakatevera mademo dzaive dzakafanana. Matimu mazhinji haana kukwanisa kupindura mubvunzo uyu pascreen: Ko AI iripi mukombuta yako? SDLC?
Zvinhu Zvitatu Zvatakaudzwa NeExpo Floor
Muhurukuro dzakawanda dzaiitwa pachiteshi chezvitima nemumakoridho, misoro mitatu yaitaurwa kakawanda.
MCP security ndiyo nzvimbo itsva yekusaziva
Chikwata chega chega chinoshandisa vabatsiri veAI coding kana agentic workflows chine MCP servers dzavasina kunyatsoongorora. Mazhinji acho haana runyorwa rwevanobvumirwa, haana maitiro ekutarisa, uye haana layer yekumanikidza pa developer endpoint. Izvi hazvisi dambudziko guru, 5.5% yema MCP servers everuzhinji ane zvikanganiso zvinokonzera chepfu, uye 43% ane command-injection injection. ASVS 1.0 inopa chitsauko chose kune zvinodiwa zvekuchengetedza zveMCP, uye hurukuro dziri kuVienna dzakasimbisa kuti apa ndipo pachasvika kurwiswa kunotevera kwe supply chain.
Mubvunzo weAI-BOM uri kuva wechokwadi
Vatungamiriri vezvekuchengetedza vari kutanga kugamuchira zvikumbiro kubva kuvaongorori vemabhuku uye enterprise vatengi vezvinhu zvese zveAI zviri musangano zvinogona kuverengwa nemuchina (mamodheru, madatasets, vamiririri, maseva eMCP, uye maturusi ekunyora makodhi eAI) nehukama hwavo, mamakisi enjodzi, uye mamepu emutemo. Masangano mazhinji haagone kugadzira imwe nhasi. AI-BOM iri kukurumidza kuva mutsivi wenguva yeAI ye SBOM, uye masangano anogona kugadzira imwe kana achida achava nebhenefiti yakakura yekutevedzera mitemo uye kuvimba sezvo zvisungo zvekuongorora zveEU AI Act zvichisvika.
Kuchengetedza software supply chain ikozvino zvinoreva kuchengetedza AI layer
Kudzora zvinhu zvechinyakare (SCA, SBOM chizvarwa, chivakwa, chipupuriro cheSLSA) zvakavakirwa nyika umo vanhu vainyora kodhi uye mapakeji aibva kumarejista everuzhinji. Muna 2026, vamiririri veAI commit kodhi yega, maseva eMCP anoita mafoni ekushandisa panzvimbo yevashandisi, uye mapakeji ane njodzi ari kugadzirwa kuti aongorore zvakananga maturusi eAI. Nzira yakachengeteka yekugovera software isingavhari nzvimbo yekurwisa AI haichakwani. Vienna yakaita kuti kubvumirana ikoko kuonekwe pakati pemashopu evatengesi, hurukuro dzemisangano, uye hurukuro dzepakoridho zvakafanana.
Zvatinotora kubva kuVienna
OWASP Global AppSec EU 2026 yaive nzvimbo inobatsira yekuenzanisa. Hurukuro nhatu dzaiwanzoitika pa expo floor (kuchengetedzwa kweMCP, kugadzirira kweAI-BOM, uye kuchengetedza chain yakazara yesoftware mune AI-native SDLC) ndidzo hurukuro dzakagadzirirwa Xygeni.
Zero Trust yakasvika pa network, cloud, uye kuzivikanwa makore apfuura. Hupenyu hwekugadzira software ndiyo layer isati yanyatsofukidzwa. Nekodhi yakagadzirwa neAI ikozvino inoumba 40% ye commits kumasangano anotungamira, uye nemabasa ehunyanzvi achiwedzera nzvimbo yekurwiswa nekukurumidza kupfuura zvinogona kugadziriswa nematurusi echinyakare eAppSec, musiyano iwoyo uri kuva dambudziko guru kumapoka ekuchengetedza muhafu yechipiri ya2026.
Kana wakarasikirwa neVienna uye uchida kuona zvatakaratidza paBooth G-08, pane nzira mbiri dzekudzidza zvakadzama: tora rwendo rwechigadzirwa kuona puratifomu iri kushanda, kana bhuku demo, uye tichakuratidzai chaizvo zvatakaratidza pa expo floor.
FAQs
Chii chinonzi OWASP AISVS?
OWASP AISVS (Kusimbiswa kweKuchengetedzwa kweAI) Standard) ndiyo yekutanga ongororo yekuchengetedzwa inoedzwa nenharaunda standard yakagadzirirwa masisitimu eAI. Yakaburitswa muna Chikumi 2026 paOWASP Global AppSec EU Vienna, ine zvinodiwa 514 zvinogona kusimbiswa muzvitsauko gumi nezviviri, zvinosanganisira kudzidziswa kwekuchengetedzwa kwedata, kupinza nekukurumidza, kuchengetedzeka kweMCP, kuronga kwevamiriri, cheni yekugovera, nezvimwe. Kusiyana nehurongwa hwekutonga, chinodiwa chega chega chakanyorwa kuti chiongororwe sechinopasa kana kuti chinokundikana.
Chii chinonzi chain yakachengeteka yekupa software muna 2026?
Kuve nesoftware yakachengeteka muna 2026 zvinoreva kuchengetedza kwete chete zvinhu zvinobvumiranwa nevashandisi vesoftware, CI/CD pipelines, uye kuvaka zvinhu zvakagadzirwa, asiwo maAI models, vamiririri, MCP servers, uye maAI coding tools ari kushandiswa muchikamu chega chega chekugadzira software. Sevamiririri veAI commit Mapakeji emakombiyuta anozvitonga ega uye ane njodzi ari kuramba achinyanya kunanga maturusi eAI, kuchengetedzwa kwecheni yekugovera kwakawedzera kusvika pakuwedzera hupenyu hwese hwekuvandudza ma agents.
