Kwiveki ephelileyo, iqela leXygeni belikwi I-OWASP Global AppSec EU 2026 eVienna, apho Iingcali zokhuseleko lwe-intanethi ezingaphezu kwama-800 bahlanganisene kwiZiko lase-Austria kwisikhumbuzo seminyaka engama-25 se-OWASP. Iintsuku ezimbini kwindawo yomboniso, iincoko ezininzi kunye CISI-Os, iinkokheli ze-AppSec, kunye neenjineli ze-DevSecOps, kunye nesibonakaliso esinye esicacileyo: ukukhusela uthungelwano lwesoftware kungene kwinqanaba elitsha, kwaye uninzi lwemibutho alukulungelanga oko.
Nantsi into esiyibonileyo, into esiyibonisileyo, kunye nento esixelelwa yilo shishino.
Oko i-OWASP iqalise eVienna
Isihloko sentetho kwingqungquthela yalo nyaka sasithi I-OWASP AISVS 1.0, ekhutshwe nge-24 kaJuni 2026, ngexesha lomsitho ngokwawo. standard iqulethe iimfuno ezingama-514 ezinokungqinisiswa kuzo zonke izahluko ezili-12 ezigubungela yonke into ukusuka ekufakweni ngokukhawuleza ukuya kukhuseleko lwe-MCP. Ngokungafaniyo nezikhokelo zolawulo ezifana ne-NIST AI RMF okanye i-ISO/IEC 42001, yonke imfuneko ye-AISVS ibhaliwe ukuba ihlolwe, iphumelele okanye isilele. Lulokuqala ukuqinisekiswa kokhuseleko oluqhutywa luluntu noluvavanywayo. standard eyenzelwe iinkqubo ze-AI, eyenziwe ngokwe-OWASP ASVS, igolide standard ukhuseleko lwesicelo sewebhu..
Ngaphaya kwe-AISVS, ithrekhi yeseshoni ibonakalise apho ingqalelo yoluntu itshintshele khona. Iintetho malunga nokhuseleko lwezicelo ze-arhente, ukhuseleko lwe-MCP, iindlela zokubonelela ngesoftware ekhuselekileyo, ukufunyanwa kwe-AI yesithunzi, kunye nokuvavanya izicelo ze-LLM kwimveliso zilawule ishedyuli. Ii-OWASP LLM ezili-10 eziphezulu, Ii-Agency Apps Top 10, kunye nee-MCP Top 10 azisaveli; ziyasebenza standardimibutho emininzi ayikawuchazi umngcipheko wayo. IVienna yenze loo msantsa wabonakala.
Oko Kwaboniswa yiXygeni eBooth G-08
Sisebenzise iintsuku ezimbini zenkomfa ukubonisa into eceliwe kakhulu ngumzi-mveliso kodwa engaqhelekanga ukuyibona: indlela yokufumana, ukufumana amanqaku, kunye nokunyanzelisa ukhuseleko kulo lonke i-AI elisetyenziswa ngamaqela akho ukuyila, kungekuphela nje ikhowudi abayivelisayo.
I-debut yaseVienna ye-Xygeni AI Inventory ibonise lonke uhlaselo lwe-AI lombutho oludweliswe ngexesha langempela, yonke imodeli, iarhente, iseva ye-MCP, kunye nesixhobo sokubhala ikhowudi se-AI, kunye namanqaku omngcipheko, iigrafu zobudlelwane, kunye ne i-AI-BOM ethunyelwa ngaphandle ilungele abalawuli kunye enterprise abathengi. Kwabaninzi abatyeleli kwi-booth, yayilixesha lokuqala bebona umphezulu wabo wohlaselo lwe-AI usenziwa njengoluhlu olucwangcisiweyo nolunokuphicothwa.
I-AI Dependency Firewall ibonise ukuba iShield ivimba iphakheji ye-npm enobuthi kwindawo yokugqibela yomphuhlisi ngaphambi kokuba ifakelwe, ngaphambi kokuba kubekho utyikityo. Olu lulawulo olukhuselekileyo lwenkqubo yokubonelela ngesoftware oluqhelekileyo. SCA izixhobo azikwazi ukubonelela, ukufunyanwa okusebenzayo ngexesha lokulanda, kungekhona emva kokuba iphakheji sele isebenzise iskripthi sayo se-postinstall.
Iincoko ezalandela imiboniso bezifana. Uninzi lwamaqela alukwazanga ukuphendula umbuzo kwiscreen: iphi i-AI yakho? SDLC?
Izinto Ezintathu Esizixelelwe Ngumgangatho We-Expo
Kwiincoko ezininzi kwi-booth nakwiipaseji, kwavela imixholo emithathu ngokuphindaphindiweyo.
Ukhuseleko lwe-MCP luyindawo entsha yokungaboni
Iqela ngalinye elisebenzisa abancedisi bekhowudi ye-AI okanye ii-workflows ze-arhente linamaseva e-MCP abangawafumananga ngokupheleleyo. Uninzi lwawo alunaluhlu lwabavunyelweyo, alunalo ulwalathiso lokuziphatha, kwaye alunalo ungqimba lokunyanzelisa kwisiphelo somphuhlisi. Oku akuyongxaki ikhethekileyo, i-5.5% yeeseva zikawonke-wonke ze-MCP zineempazamo zokutyhefa izixhobo, kwaye i-43% ithwala ubuthathaka bokufaka umyalelo. I-ASVS 1.0 inikela isahluko esipheleleyo kwiimfuno zokhuseleko lwe-MCP, kwaye iingxoxo eVienna ziqinisekisile ukuba kulapho uhlaselo olulandelayo lwe-supply chain luza kufika khona.
Umbuzo we-AI-BOM uya usiba yinyani
Iinkokheli zokhuseleko ziqala ukufumana izicelo ezivela kubahloli bee-akhawunti kunye enterprise abathengi be-inventory efundeka ngomatshini yazo zonke izinto ze-AI ezikumbutho (iimodeli, iiseti zedatha, iiarhente, iiseva ze-MCP, kunye nezixhobo zokubhala ikhowudi ze-AI) ngobudlelwane bazo, amanqaku omngcipheko, kunye nemephu yokulawula. Uninzi lwemibutho alunakuyivelisa namhlanje. I-AI-BOM ngokukhawuleza iba ngumlandeli wexesha le-AI SBOM, kwaye imibutho enokuyivelisa xa ifunwa iya kuba nethuba elikhulu lokuthobela imithetho kunye nokuthembana njengoko kufika izibophelelo zokuhlolwa kwe-EU AI Act.
Ukhuseleko lwenkqubo yokubonelela ngesoftware ngoku luthetha ukukhusela umaleko we-AI
Ulawulo lwenkqubo yokubonelela ngeenkonzo zemveli (SCA, SBOM isizukulwana, imvelaphi yokwakha, ubungqina be-SLSA) zakhiwe kwihlabathi apho abantu babhala khona ikhowudi kwaye iipakeji zivela kwiirejista zikarhulumente. Ngo-2026, iiarhente ze-AI commit ikhowudi ngokwayo, iiseva ze-MCP ziqhuba iifowuni zezixhobo egameni labasebenzisi, kwaye iipakethe ezinobungozi ziyayilwa ukuze zijolise ngqo kwizixhobo ze-AI. Icebo elikhuselekileyo lokubonelela ngesoftware elingagubungeli umphezulu wohlaselo lwe-AI alisaphelelanga. IVienna yenze loo mvumelwano yabonakala kuzo zonke ii-booths zabathengisi, iintetho zeseshoni, kunye neencoko zepaseji ngokufanayo.
Oko Sikuthathayo eVienna
I-OWASP Global AppSec EU 2026 yayilinqaku eliluncedo lokulinganisa. Iincoko ezintathu ezenzeka rhoqo kwi-expo floor (ukhuseleko lwe-MCP, ukulungela i-AI-BOM, kunye nokuqinisekisa uthotho olupheleleyo lobonelelo lwesoftware kwi-AI-native SDLC) zezona ncoko iXygeni eyakhelwe zona.
I-Zero Trust ifikelele kwinethiwekhi, ilifu, kunye nobunikazi kwiminyaka eyadlulayo. Umjikelo wobomi bophuhliso lwesoftware ngumaleko ongakhange ugutyungelwe ngokupheleleyo. Njengoko ikhowudi eyenziwe yi-AI ngoku ibandakanya i-40% commitkwimibutho ephambili, kwaye ngenxa yemisebenzi ye-arhente eyanda umphezulu wohlaselo ngokukhawuleza kunokuba izixhobo zemveli ze-AppSec zinokuziqhelanisa, loo msantsa uba ngumceli mngeni obalulekileyo kumaqela okhuseleko kwisiqingatha sesibini sowama-2026.
Ukuba uphoswe yiVienna kwaye ufuna ukubona oko sikubonisileyo eBooth G-08, kukho iindlela ezimbini zokungena nzulu: funda ukhenketho lwemveliso ukubona iqonga lisebenza, okanye incwadi demo, kwaye siza kukubonisa kanye oko sikubonisileyo kumgangatho we-expo.
FAQs
Yintoni i-OWASP AISVS?
Ukuqinisekiswa koKhuseleko lwe-AI (OWASP AIVS) Standard) luvavanyo lokuqala lokhuseleko oluqhutywa luluntu standard yenzelwe iinkqubo ze-AI. Ikhutshwe ngoJuni 2026 kwi-OWASP Global AppSec EU Vienna, iqulethe iimfuno ezingama-514 ezinokungqinisiswa kuzo zonke izahluko ezili-12, ezigubungela ukuthembeka kwedatha yoqeqesho, ukufakwa ngokukhawuleza, ukhuseleko lwe-MCP, ulungelelwaniso lwearhente, uthotho lokubonelela, nokunye. Ngokungafaniyo nezikhokelo zolawulo, yonke imfuneko ibhalwe ukuba ihlolwe ukuba iyaphumelela okanye iyasilela.
Yintoni ikhonkco lokubonelela ngesoftware ekhuselekileyo ngo-2026?
Uthungelwano olukhuselekileyo lwesoftware ngo-2026 aluthethi ukukhusela kuphela ukuxhomekeka kwimithombo evulekileyo, CI/CD pipelines, kwaye bakhe izinto zakudala, kodwa kunye neemodeli ze-AI, iiarhente, iiseva ze-MCP, kunye nezixhobo zokubhala ikhowudi ze-AI ezifakwe kwisigaba ngasinye sophuhliso lwesoftware. Njengeearhente ze-AI commit ikhowudi ngokuzimela kwaye iipakethe ezinobungozi zijolise ngakumbi kwizixhobo ze-AI, ukhuseleko lwekhonkco lobonelelo lwandisiwe lwaya kubandakanywa nomjikelo opheleleyo wophuhliso lwe-arhente.
