Imyenda mishya yumwami w'abami: Mugihe turebye Muse, Fondasiyo irasenyuka
Reka tuyobore: inganda zikoranabuhanga zifite ibitekerezo bishya, kandi byitwa "umutekano wa AI." Twese dutegerejweho kwibanda ku guterwa vuba, uburozi bwikitegererezo, hamwe no gusohora amakuru kuva mururimi runini. Hagati aho, ibikorwa remezo bifatika, bifatika, bifatanyiriza hamwe imishinga yacu hamwe biratwikwa cyane na barrage idahwema kumunsi wa zeru. Ibintu biherutse kuba birimo urubuga runini rwa AI, byerekana imbogamizi nini mu kubungabunga ibikorwa remezo bya AI, byerekana iyi dicotomy iteje akaga [1].
Meta, isosiyete izwiho "kwimuka vuba no kumena ibintu", yahuye n’igenzura kubera amakosa y’umutekano mu mbuga za AI. Kurugero, porogaramu ya bug bounty yavumbuye inenge igaragara yerekana umukoresha Virtual Machines. Ntabwo byari amakuru yoroheje cyangwa kumeneka byihuse, ahubwo byari ikosa ryibanze, ibikorwaremezo-urwego rwerekanaga * umukoresha VMs *. Ibi ntabwo ari bimwe na bimwe bya Esoteric AI yihariye; ubu ni shingiro rya VM kwigunga, ikibazo twatekerezaga ahanini cyakemuwe hashize imyaka icumi. Irerekana ihohoterwa rikomeye ryibanga nubusugire bwamakuru, bigira ingaruka ku buryo butaziguye ku bakoresha ndetse n’abakiriya ba rwiyemezamirimo bakoresha ibikorwa remezo bya AI.
Ubu bwoko bw'inenge, nubwo bugira ingaruka zikomeye, bwumva butameze nkikibazo gishya "Umutekano wa AI" kandi birasa nkibikorwa remezo bya kera byambaye ingofero ya AI. Nukwibutsa ko na platform ya AI yateye imbere yubatswe kumurongo wa compte isanzwe, guhuza, hamwe na virtualisation. Niba ibyo bice fatizo byuzuyemo umwobo, ntacyo bitwaye nukuntu moderi yawe ya AI igoye; sisitemu yose ikomeza kwibasirwa. "AI" muriyi nkuru ni nko kurangaza, kuyobora nabi bikurura amaso yacu kure y'ibiti bibora munsi yimbaho zisennye.
CISA ya KEV Barrage: Ikimenyetso Cyingenzi
Mugihe duhugiye mu kuganira ku ngaruka zishingiye ku myitwarire ya chatbots hamwe n’umutekano w’umutekano wa AI, CISA irimo guta umubare utigeze ubaho w’intege nke zikoreshwa cyane mu gitabo cyayo kizwi cyane (KEV). Ntabwo ari imyitozo ngororamubiri. Uru ntabwo ari "patch umunsi umwe". Uru ni byihutirwa "inzu yawe irashya * kurubu *" urutonde.
Mu byumweru bishize, CISA yongeyeho ibyanditswe byinshi, bituma umubare w’intege nke zikoreshwa cyane ku mubare utangaje mu gihe gito [2]. Ibi ntabwo "umutekano ari mubi" gusa; iyi ni gahunda itunganijwe, yiyongera kubibazo bigira ingaruka zikomeye kuri software ikora isi yacu.
Reba ibyiyongereyeho kurutonde rwa KEV: **
- ** CVE-2023-29357: ** Microsoft SharePoint Server ya Microsoft amahirwe yo kwiyongera kwintege nke, bigira ingaruka kumugongo wibigo bitagira ingano.
- ** CVE-2023-42824: ** Intege nke za Apple iOS / iPadOS, zimaze gukoreshwa mubitero byibasiwe, byerekana ko nibidukikije bigenzurwa bidashoboka.
- ** AVE
Uku kwiyongera kwumuriro wongeyeho gukoreshwa zeru-iminsi mubicuruzwa bikomeye - Microsoft, Apple, Splunk, MikroTik, Linux, JFrog - bisaba kwitabwaho byihuse. Ntabwo ari umuburo rusange; ni siren ivuza neza kuri buri IT nitsinda ryumutekano. Urutonde rwa KEV rwa CISA ntabwo ari igitekerezo cyibigo bya federasiyo gusa; ni umuburo ukomeye kuri * amashyirahamwe yose. Ntiwirengagize akaga.
Ibishushanyo bya "Umutekano wa AI" nigiciro cyo Kurangaza
Dore ukuri kutoroheye: inenge zifatizo mubikorwa bya AI hamwe na barrage ya CISA KEV ni ibintu bifitanye isano nikibazo kimwe. Bombi bavuza induru ku bijyanye n’ihungabana ry’ibanze mu mutekano wa software, ariko inganda zacu zireba hamwe zitemewe. Twashimishijwe cyane n'amasezerano n'akaga ka "AI" ku buryo tureka ibikorwa remezo fatizo bikabora.
"Umutekano wa AI" wahindutse ijambo, imipaka mishya kubajyanama n'abashinzwe ibicuruzwa. Ariko mubyukuri ni iki? Akenshi, ni * umutekano * ukoreshwa kuri sisitemu ya AI. Nibyo, AI itangiza ibice bishya byibitero hamwe nibibazo bidasanzwe, ariko igice kinini cy "umutekano wa AI" ni ubuhanga bukomeye, uburyo bwo gukoresha kodegisi itekanye, hamwe no guterura umwete - ibintu bimwe tumaze imyaka mirongo tunanirwa. Ikibazo cya VM cyo kwigunga cyavuzwe haruguru ni urugero rwiza: intege nke za kera zongerewe nuburyo bugoye bwa platform.
Turimo kubaka sisitemu zidasanzwe za AI hejuru yuburyo bworoshye kandi bukoreshwa cyane. Ninkaho gushushanya witonze imodoka yo kwiyobora hamwe nogukoresha AI igezweho, mugihe ibiziga bigwa kandi moteri ikagenda. Kwibanda kuri "umutekano wa AI" akenshi wumva ari ukurangaza, kuyobya umutungo no kwitabwaho kuva mundane, idashimishije, ariko ikomeye cyane yo kubona ibikorwa remezo bihari.
Turahuze cyane kwiruka inyuma yikintu gikurikira kuburyo tureka ibintu binini bigashya? Ubwinshi n'ubugari bw'iterabwoba rya KEV byerekana imbogamizi ihamye kandi yihutirwa ku bikorwa remezo fatizo, bitandukanye n'ibiganiro bya AI-bishingiye ku munsi wa zeru. Ibi ntabwo bijyanye na kazoza ka AI; bijyanye nuburyo bugezweho bwo kubaho kwacu.
Niki None, CTOs?
Kubijyanye na injeniyeri iyobora na CTOs, ubutumwa buragaragara kandi bwihuse:
- ** Shyira imbere urutonde rwa KEV: ** Hagarika byose. Kuramo izo ntege nke. Bitegeke. Bishyire mu bikorwa. Ibi ntabwo ari ubushake.
- Moderi nziza ya AI ntishobora kugukiza niba uwaguteye afite VM yawe cyangwa seriveri yawe ya SharePoint.
- ** Gushora mumutekano shingiro: ** Ibi bivuze ibirenze kugura ikindi gikoresho cyumutekano. Bisobanura gushora imari mubantu, inzira, numuco uha agaciro umutekano nka disipuline yibanze yubuhanga, ntabwo ari ibitekerezo. Porogaramu ya Bounty nziza ni nziza, ariko igomba kuba urusobe rwumutekano, ntabwo ari ingamba zambere zumutekano.
Ibyabaye birimo ibikorwa remezo bya AI ni guhamagarwa, ariko urutonde rwa CISA KEV nirwo rwihutirwa. Tugomba guhagarika kwishimira ibikorwa byumutekano bigezweho bya AI hanyuma tugatangira gutobora umwobo mubyo twirwanaho. Ejo hazaza ha AI harashimishije, ariko uko umutekano wacu umeze ubu biteye ubwoba.
Inkomoko
[1] Umutekano wa AI ni akajagari, kandi ugiye kurushaho kuba mubi - ]