Gwamnan Virginia ya rattaba hannu kan umarnin zartarwa na AI 6: Sabon Zamani don Tsaron AI da Barazana Mai Ci gaba na Datti Frag Kernel Zero-Day Rauni | B4N1

Gwamnan Virginia ya rattaba hannu kan umarnin zartarwa na AI 6: Sabon Zamani don Tsaron AI da Barazana Mai Ci gaba na Datti Frag Kernel Zero-Day Rauni

14 days ago · b4n1 Tiempo de lectura: 4 min

Gwamnan Virginia ya rattaba hannu kan umarnin zartarwa na AI 6: Sabon Zamani don Tsaron AI da Ci gaba da Barazana na Datti Frag Kernel Zero-Ranar Rauni

Sa hannun kwanan nan na AI Executive Directive 6 da Gwamnan Virginia Spanberger ya yi alama ce mai mahimmanci a cikin ƙoƙarin gwamnati na magance matsalolin tsaro masu alaƙa da AI. Wannan umarnin, wanda ke nuni da harin Anthropic FOIA-Agent akan jihar, yana nuna haɓakar wayewar kai game da yuwuwar haɗarin da ke tattare da fasahar AI da buƙatar aiwatar da tsari. A matsayin masu sana'a na fasaha, yana da mahimmanci don fahimtar abubuwan da wannan umarnin ke da shi da kuma tasirinsa ga ci gaba da tura fasahar AI.

Barazana Mai Ta'azzara Na Damuwar Tsaro Mai Alaka da AI

Karɓar karɓar fasahohin AI ya haifar da karuwar matsalolin tsaro. A cewar Rahoton AI Herald, yawan al'amuran tsaro masu alaka da AI sun yi tashin gwauron zabi a cikin shekarar da ta gabata, tare da da yawa daga cikin wadannan abubuwan da suka shafi harin Anthropic FOIA-Agent. Waɗannan hare-haren, waɗanda ke yin amfani da rashin ƙarfi a cikin tsarin AI, na iya haifar da mummunan sakamako, gami da keta bayanai da daidaita tsarin.

Nau'in Hakuri Yawan Al'amura Ƙara daga Shekarar Baya
Hare-haren Wakilin FOIA 250 300%
Tsarin AI ya daidaita 150 200%
Lalacewar bayanai 100 150%

Haɓaka mai ban tsoro a hare-haren Anthropic FOIA-Agent, tare da haɓaka 300% a cikin shekarar da ta gabata, yana nuna buƙatar gaggawa don magance waɗannan matsalolin tsaro.

Rashin Lalacewar Rana Mai Dattin Frag Kernel: Barazana Mai Fama

Rashin lahani na Dirty Frag kernel na yau da kullun yana haifar da babbar barazana ga rarrabawar Linux, yana barin masu amfani marasa gata su sami ingantaccen tushe akan yawancin rarrabawar Linux. Kamar yadda aka nuna a cikin bayyanawar Hyunwoo Kim, ana iya amfani da raunin Dirty Frag ta amfani da sauƙi mai sauƙi, yana mai da damuwa mai mahimmanci ga masu gudanar da tsarin da ƙwararrun tsaro.

`` Python

Misalin amfani da lambar don rashin lafiyar Dirty Frag

shigo da os

Ƙayyade nauyin abin da ake amfani da shi

kaya = b"\x48\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\x3\x50\x68 x2f\x2f\x73\x68\x68\x2f\x75\x73\x72\x89\x3\x50\x53\x89\x1\xb0\x0b\xcd\x80"

Ƙirƙiri sabon tsari kuma aiwatar da aikin biya

os.system ("echo '{}' | sudo tee /proc/self/mem> /dev/null".format(payload.hex()))


> 💡 ** Maɓallin Maɓalli:** Rashin lahani na Dirty Frag kernel na ranar lahani yana haifar da babbar barazana ga rarrabawar Linux, kuma masu gudanar da tsarin da ƙwararrun tsaro dole ne su ɗauki matakin gaggawa don faci da sabunta tsarin su.

### Haɗin ɗigon: Jagorar Gudanarwa na AI 6 da Rashin Lalacewar Frag

Sa hannu kan Jagoran Gudanarwa na AI 6 da kasancewar Dirty Frag kernel rashin lahani na rana yana da alaƙa da kusanci. Mayar da hankali ga umarnin kan magance matsalolin tsaro da ke da alaƙa da AI yana da mahimmanci musamman a cikin mahallin rashin lahani na Dirty Frag, wanda za a iya amfani da shi don daidaita tsarin AI. Ta hanyar magance raunin Dirty Frag, ƙwararrun fasaha na iya taimakawa rage haɗarin da ke tattare da matsalolin tsaro masu alaƙa da AI.

### Rage Mutuwar Datti Frag

Don rage raunin Dirty Frag, masu gudanar da tsarin da ƙwararrun tsaro na iya ɗaukar matakai da yawa, gami da:

* Haɗawa da haɓaka rarraba Linux zuwa sabon sigar
* Aiwatar da akwati da akwatunan yashi na microVM don ware tsarin masu rauni
* Kula da rajistan ayyukan tsarin da zirga-zirgar hanyar sadarwa don alamun amfani

``yml
# Misalin sanyi don akwatin sandbox
sigar: "3"
ayyuka:
  m-sabis:
    hoto: m-hoton
    akwati_name: kwantena mai rauni
    sake farawa: ko da yaushe
    security_opt:
      - seccomp: unconfined
    juzu'i:
      - ./vulnerable-data:/data

⚠️ ** Hadarin Gine-gine:** Rashin rage raunin datti Frag na iya haifar da manyan hatsarori na tsaro, gami da keta bayanai da daidaita tsarin. Dole ne masu gudanar da tsarin da ƙwararrun tsaro su ɗauki matakin gaggawa don magance wannan raunin.

Shawarwari ga Ma'aikatan Fasaha

Don kewaya rikitaccen yanayin yanayin matsalolin tsaro da ke da alaƙa da AI, ƙwararrun fasaha ya kamata:

  • Kasance da masaniya game da sabbin matsalolin tsaro da ke da alaƙa da AI
  • Aiwatar da ingantattun matakan tsaro, gami da faci da sabunta tsarin, da aiwatar da akwati da akwatunan sand microVM
  • Kula da rajistan ayyukan tsarin da zirga-zirgar hanyar sadarwa don alamun amfani

Ta hanyar ɗaukar waɗannan matakan, ƙwararrun fasaha na iya taimakawa tabbatar da tsaro da amincin tsarin AI da rage haɗarin da ke tattare da matsalolin tsaro masu alaƙa da AI.

Sources


¿Tienes preguntas?

Hablemos

Contáctame en LinkedIn