新的赛场AI如何重塑赛场并成为力量倍增器

1The New Playing Field: How AI Reshapes the Playing Field and Becomes a Force MultiplierJon ParrishSenior Penetration Tester at BPMOctober 20242Jon Parrish •Senior penetration tester•Five years offensive security•Malware dev.•Red team and initial access•Web application testing•Personal Interests•AI•Game hacking•Climbing•Cybersecurity3What is a Large Language Model (LLM)?An LLM, at its core, is a next word predictor using a neural network.What if we were to take the phrase “The quick brown” and ask an LLM what the next word is?You might say “fox” is the next word, based on your training data and context.Just as easily, we could train the LLM to say something else, like “dog.”This is achieved with a whole lot of math, and a whole lot of data. 4Mandatory XKCDhttps://xkcd.com/1838/5What is an LLM not?A thinking personA traditional programAlways accurate6Not always accurate7Ethics and concerns•Most are trained on data that was copyrighted•Unclear what happens when laws catch up•Don’t send s