在生成人工智能时代偿还安全债务

State of Software Security: Addressing the Threat of Security DebtChris WysopalChief Security EvangelistWorld AI Summit 2024October 10, 2024Unites States Senate testimony -19 May 1998One of the 1stvulnerability researchers, member of hacker think tank, L0pht in 1990s 3Today we are finding software security flaws faster than we can fix them4Flaws accumulate faster than they’re fixed56Our EU customers7Let’s add the exciting potential of large language models that can write code!9Generating codeUnderstanding code/Code reviewRemediating defectsTranslating programming languagesCreating and maintaining unit testsWriting documentationDeveloper GenAI use right now10Learning about the code baseSearching for answers to avoid reinventing the wheelReading log files to find a root causeCreating and running functional & non-functional testsRemediating security vulnerabilitiesEmerging dev uses for GenAI›Public GitHub RepositoriesOpen-Source ProjectsDocumentation and CommentsThirds Party Code (License