Igisekuru cya Al-Inkota ebyiri: Gufungura Ibishoboka Mugihe Kugabanya Ingaruka

Byatwaye igihe kitarenze umwaka kugirango AI ihindure kuburyo bugaragara imiterere yumutekano. AI yibyara byatangiye kuba rusange muri Gashyantare 2024.Amezi ya mbere yamaranye ubwoba. Ibyo yashoboraga gukora nibikorwa bishobora kuzana ntibyari byunvikana. Ukurikije a 2024 Ubushakashatsi bwuzuye bwabashakashatsi , hafi 75% byabateza imbere ubu bakoresha cyangwa bateganya gukoresha ibikoresho bya code ya AI.

Muri ibyo bikoresho, ChatGPT ya OpenAI irazwi cyane, hamwe 82% byabateza imbere bavuga imikoreshereze isanzwe , hamwe na GitHub Copilot ikurikira, ikoreshwa na 44% byabateza imbere. Kubijyanye no kwandika code, 82% byabateza imbere bakoresha AI naho 68% bakoresha AI mugihe bashakisha ibisubizo. Iyo uhujije umuterimbere wumva uburyo bwo kwandika neza code hamwe na AI ibyara umusaruro, imikorere irenga 50% cyangwa nziza irasanzwe.

Kwemererwa ni byinshi, ariko hari impungenge zijyanye nukuri numutekano wa code yakozwe na AI. Kubimenyereye ubunararibonye cyangwa abimenyereza umutekano, ntibisaba igihe kinini kubona iyo code yakozwe na Generative AI ifite ibibazo byayo. Hamwe nibisubizo byihuse, amakosa nibibazo bigaragara vuba.

Ariko abashinzwe iterambere bashimishijwe na AI barimo kwinjiza ibirenze umutekano washaje muri kode. Baragenda kandi bazana imiterere ya AI mubicuruzwa batezimbere - akenshi nta mutekano ubizi, tutibagiwe uruhushya - bizana ibibazo byinshi. Ku bw'amahirwe, AI nayo ni nziza mu kurwanya ibyo bibazo iyo yerekanwe mu cyerekezo cyiza.

Iyi ngingo igiye kureba uburyo:

• AI irashobora gufasha amashyirahamwe kuvumbura tekinoroji ya AI yose bafite kandi ikoresha, ndetse igicucu cya AI amakipe yumutekano atazi.
• AI ituma amakuru asobanura gukuramo code, iterambere ryimpinduramatwara mumutekano wa porogaramu.
• AI ikoresha ingufu zitukura zishobora kwerekana intege nke muri LLMs na progaramu
• AI irashobora gufasha mugushiraho ingamba zo gukumira no kugabanya ingaruka ziterwa na AI.
• AI irashobora gufasha abitezimbere gusobanukirwa no kurinda API bakoresha mubisabwa.

Igicucu AI: Iterabwoba ritagaragara ryihishe muri Codebase yawe

Tekereza ibihe aho abitezimbere, batewe no gukenera kugendana na bagenzi babo cyangwa bashimishijwe gusa nibyo AI itanga, bahuza imiterere ya AI nibikoresho mubikoresho batabizi itsinda ryumutekano. Nuburyo Shadow AI ibaho.

Ibyo twabonye kuri Mend.io byagaragaje icyerekezo gitangaje: ikigereranyo kiri hagati y’amakipe y’umutekano azi n’ibyo abaterankunga bakoresha mu bijyanye na AI ni ikintu cya 10. Ibi bivuze ko kuri buri mushinga wa AI ukurikiranwa n’impapuro, izindi 10 zikorera mu gicucu, bikaba biteza ingaruka zikomeye ku mutekano w’umuryango.

Kuki Igicucu AI kijyanye cyane?

• Intege nke Zidakurikiranwa : Moderi ya AI idakurikiranwa irashobora kubika intege nke zizwi, bigatuma porogaramu yawe ishobora kwibasirwa cyangwa ishobora kwibasirwa.

• Kumeneka kwamakuru : AI itagizwe neza irashobora kwerekana amakuru atabishaka, biganisha ku kurenga ku buzima bwite no gucibwa amande.

• Kurenga ku kubahiriza : Gukoresha imiterere ya AI itemewe bishobora kurenga ku nganda n’umutekano w’amakuru.

Kubwamahirwe, AI ubwayo itanga igisubizo cyikibazo. Ibikoresho byumutekano bigezweho bya AI birashobora gusikana codebase yawe yose, bikerekana tekinoroji ya AI ikoreshwa, harimo nibyihishe kure. Ibarura ryuzuye rizafasha amatsinda yumutekano kubona neza igicucu cya AI, gufasha gusuzuma ingaruka, no gushyira mubikorwa ingamba zikenewe zo kugabanya.

Umutekano wa Semantike: Igihe gishya mu Isesengura rya Kode

Ibikoresho gakondo byumutekano byishingikiriza kumibare yibanze no kugenzura isesengura ryimikorere, bitanga imyumvire mike yimikorere ya code. AI, ariko, ifite ubushobozi bwo gushiramo ibisobanuro kandi, nkigisubizo, itanga ibisubizo byiza.

Ibikoresho byumutekano bifashwa na AI birashobora gukuramo ingingo zamakuru zisobanutse kuri kode, bigatanga ubushishozi bwimbitse mubyifuzo nyabyo byimyitwarire ya AI. Ibi bifasha amatsinda yumutekano kuri:

• Menya intege nke zitoroshye: Menya intege nke zajya zitamenyekana nibikoresho gakondo byumutekano
• Sobanukirwa n'imyitwarire yicyitegererezo cya AI: Kunguka neza uburyo moderi ya AI ikorana namakuru hamwe nubundi buryo, cyane cyane na AI cyangwa RAG ya agent.
• Koresha ibizamini byumutekano: Gutezimbere ibizamini byumutekano kandi bigezweho bishingiye kumyumvire isobanutse, kandi ubashe kwandika byihuse no kuvugurura inyandiko za QA zikoresha kimwe nikizamini cyimbere.

AI Adversarial AI: Izamuka rya AI Itukura

Kimwe nubundi buryo ubwo aribwo bwose, moderi ya AI nayo irashobora kwibasirwa. Itsinda ritukura rya AI rikoresha imbaraga za AI mu kwigana ibitero byo guhangana, bikagaragaza intege nke muri sisitemu ya AI no kuyishyira mu bikorwa. Ubu buryo bukubiyemo gukoresha ibibazo bivuguruzanya, ibicuruzwa byakozwe muburyo bwihariye bugamije gukoresha intege nke no gukoresha imyitwarire ya AI. Umuvuduko ibyo bishobora kugerwaho bituma byanze bikunze AI igiye gukoreshwa cyane mugihe cya vuba.

AI Red Teaming ntabwo ihagarara aho. Ukoresheje ibikoresho bya Red Red Teaming, porogaramu zirashobora guhura nibitero byubugome bigamije kumenya intege nke no gufata sisitemu. Bimwe muribi bikoresho bisa nuburyo DAST ikora, ariko kurwego rukomeye.

Ibyingenzi byingenzi:

Model Uburyo bwo Gukangisha Gukora: Guteganya ibitero bishobora guterwa no kumva uburyo imiterere ya AI ishobora gukoreshwa nuburyo ishobora guhuzwa kugirango yibasire ibidukikije cyangwa ubundi bwoko bwa AI.

Test Kwipimisha Umutekano Ukomeye: Shyira mu bikorwa tekinike itukura ya AI kugirango tumenye neza kandi ugabanye intege nke.

Gufatanya nabashinzwe iterambere rya AI: Korana cyane nitsinda ryiterambere kugirango harebwe iterambere ryiterambere rya AI hamwe nuburyo bukoreshwa bwa code.

Murinzi: Gushiraho Imyitwarire Yizewe ya AI

AI itanga agaciro kenshi kadashobora kwirengagizwa. Ubushobozi bwayo bwo kubyara bukomeje gutangaza abakorana nayo. Baza icyo ukunda kandi kizagaruka igisubizo kitari buri gihe ariko akenshi cyukuri. Kubera iyo mpamvu, ni ngombwa guteza imbere izamu ryemeza imikoreshereze ya AI ishinzwe kandi itekanye.

Aba barinzi barashobora gufata uburyo butandukanye, harimo:

• Kode ikaze : Gushyira mubikorwa umutekano mwiza muri kode kugirango wirinde intege nke nko gutera inshinge.
• Guhindura Sisitemu Byihuse : Gutegura witonze sisitemu isaba kugabanya ubushobozi bwa moderi ya AI no gukumira ibikorwa bitateganijwe.
• Abashinzwe isuku n’abashinzwe umutekano : Guhuza uburyo bwumutekano bwemeza ibyinjira, gushungura ibisohoka, no gukumira kwinjira bitemewe.

Icyitonderwa cyingenzi mugushira mubikorwa izamu ni ubucuruzi hagati yumutekano no guhinduka kwiterambere. Mugihe uburyo bwa firewall busa nuburyo butanga uburyo bworoshye bwo koherezwa, porogaramu yihariye irinda abadandaza irashobora gutanga uburinzi bukomeye kandi bwiza.

Umutekano wa API Umutekano mugihe cya AI

Porogaramu za AI zishingiye cyane kuri API kugirango zikorane na serivisi zo hanze ninkomoko yamakuru. Iyi mikoranire itangiza ingaruka z'umutekano imiryango igomba gukemura yitonze.

Impungenge zingenzi hamwe numutekano wa API mubisabwa AI:

• Kumeneka kwamakuru binyuze muri APIs: Abakinnyi babi barashobora gukoresha intege nke za API kugirango bibye amakuru yoroheje yatunganijwe na moderi ya AI.
• Urufunguzo rwa API rwangiritse: Urufunguzo rwa API rudafite umutekano rushobora gutanga uburenganzira butemewe kuri sisitemu ya AI hamwe namakuru.
• Igice cya gatatu API Ingaruka: Kwishingikiriza kumurongo wa gatatu APIs birashobora kwerekana amashyirahamwe intege nke muri izo serivisi.

Imyitozo Nziza yo Kurinda API muri Porogaramu ya AI:

• Ibarura ryuzuye rya API: Menya APIs zose zikoreshwa mubisabwa bya AI hanyuma urebe uko umutekano wabo uhagaze.
• Umutekano API Kwemeza no Kwemerera: Shyira mubikorwa bikomeye byo kwemeza no gutanga uburenganzira kugirango ugabanye API kwinjira. Menya neza ko ushyira mu bikorwa icyitegererezo "Ubusanzwe Uburenganzira".
• Ikizamini gisanzwe cya API cyumutekano: Kora isuzuma ryumutekano risanzwe kugirango umenye kandi ugabanye intege nke za API.

Umwanzuro

Impinduramatwara ya AI ntabwo bishoboka ejo hazaza, yamaze hano! Mugusuzuma ubushishozi bwumutekano wa AI bwaganiriweho muriyi nyandiko, amashyirahamwe arashobora kuyobora iki gihe cyimpinduka kandi agakoresha imbaraga za AI mugihe agabanya ingaruka. AI yabaye nyamukuru mugihe gito, tekereza uko izaba imeze mumwaka. Ejo hazaza ha AI ni heza rero witegure kuyikoresha kandi urebe ko nayo ifite umutekano. ** Kubindi bisobanuro kuri AI & AppSec - Reba ibyacu webinar ** hanyuma ushishoze ibibazo bikomeye bikikije AI ikoreshwa na AI hanyuma umenye uburyo bwo kurinda code yawe muriki gihe gishya! AI ihindura iterambere rya software, ariko ingamba zawe z'umutekano zirakomeza?

-Yanditswe na Jeffrey Martin, VP yo kwamamaza ibicuruzwa kuri Mend.io