Zovala Zatsopano Zachitetezo za Emperor AI: Tikuyang'ana ku Muse, Maziko Amagwa
Tiyeni tikhale olunjika: makampani opanga zamakono ali ndi chidwi chatsopano, ndipo amatchedwa "AI chitetezo." Tonse tikuyembekezeka kuyang'ana kwambiri jakisoni mwachangu, kupha machitsanzo, ndi kuchotsa deta kuchokera kumitundu yayikulu yazinenelo. Pakadali pano, zomangamanga zenizeni, zakuthupi, zama digito zomwe zimagwirizira mabizinesi athu palimodzi zikuyatsidwa mwachangu ndi masiku ambiri a ziro. Chochitika chaposachedwa chokhudza nsanja yayikulu ya AI, kuwonetsa zovuta zambiri pakuteteza zida za AI, zikuwonetsa kuphatikizika kowopsa kumeneku [1].
Meta, kampani yomwe imadziwika ndi "kuyenda mwachangu ndikuphwanya zinthu", yayang'anizana ndi zovuta zachitetezo pamapulatifomu ake a AI. Mwachitsanzo, pulogalamu yaulere ya cholakwika idavumbulutsa cholakwika chachikulu chowululira ogwiritsa ntchito Virtual Machines. Uku sikunali kutayikira kosadziwika bwino kwa data kapena kudumpha kwanzeru mwachangu, koma cholakwika chachikulu, chomwe chidavumbulutsa ma VM. Izi sizomwe zili pachiwopsezo cha Esoteric AI; uku ndiye kudzipatula kwa VM, vuto lomwe tinkaganiza kuti lidathetsa zaka khumi zapitazo. Zimayimira kuphwanya kwakukulu kwachinsinsi ndi kukhulupirika kwa data, zomwe zimakhudza mwachindunji ogwiritsa ntchito komanso makasitomala omwe angakhale mabizinesi omwe akugwiritsa ntchito zida za AI.
Cholakwika chamtunduwu, ngakhale chimakhala chothandiza, sichimamva ngati vuto la "AI chitetezo" komanso ngati kulephera kwachitukuko chovala chipewa cha AI. Ndi chikumbutso kuti ngakhale nsanja zapamwamba kwambiri za AI zimamangidwa pamakompyuta wamba, ma network, ndi virtualization. Ngati zigawo zoyambirazo zili ndi mabowo, zilibe kanthu kuti mtundu wanu wa AI ndi wapamwamba bwanji; dongosolo lonse limakhalabe pachiwopsezo. Mbali ya "AI" ya nkhaniyi yatsala pang'ono kusokoneza, kusokonekera komwe kumatipangitsa kuyang'ana kutali ndi matabwa owola omwe ali pansi pamatabwa opukutidwa.
CISA's KEV Barrage: A Critical Indicator
Tili otanganidwa kukangana zokhudzana ndi chikhalidwe cha ma chatbots omveka komanso zovuta zachitetezo cha AI, CISA ikuponya ziwopsezo zomwe sizinachitikepo m'mabuku ake a Known Exploited Vulnerabilities (KEV). Izi sizinthu zongoyerekeza. Uwu si mndandanda wa "chigamba tsiku lina". Uwu ndi mndandanda wachangu "nyumba yanu ikuyaka * pompano *".
M'masabata aposachedwa, CISA yawonjezera zolemba zambiri, zomwe zikubweretsa ziwopsezo zonse zomwe zidagwiritsidwa ntchito modabwitsa pakanthawi kochepa [2]. Izi sikuti "chitetezo ndi choipa"; ili ndivuto ladongosolo, lomwe likukulirakulirakulira lomwe likukhudza pulogalamu yamabizinesi yomwe imayenda padziko lonse lapansi.
Ganizirani zowonjezera zaposachedwa pamndandanda wa KEV:
- CVE-2023-46214: A Splunk Enterprise remote code execution vulnerability (CVSS 9.8) yokhala ndi nthawi yomaliza ya CISA, zomwe zimapangitsa makina osasinthika kukhala pachiwopsezo kwambiri.
- CVE-2023-29357: Mwayi wa Microsoft SharePoint Server ukukwera pachiwopsezo, zomwe zimakhudza msana wa ma intranet ambiri amakampani.
- CVE-2023-42824: Chiwopsezo cha Apple iOS/iPadOS, chomwe chimagwiritsidwa ntchito kale pakuwukira komwe mukufuna, kusonyeza kuti ngakhale zachilengedwe zoyendetsedwa bwino sizingalowe.
- CVE-2023-30799: Kulephera kwa ma code a MikroTik RouterOS, kumakhudza ma routers omwe amalumikiza chilichonse, nthawi zambiri amasiyidwa m'makona akuya kwambiri a netiweki.
Kuwonjezedwa kwachangu kumeneku kwamasiku aziro omwe adabera nawo mwachangu mavenda akuluakulu - Microsoft, Apple, Splunk, MikroTik, Linux, JFrog - amafuna chidwi chanthawi yomweyo. Ili si chenjezo wamba; ndi siren ikulira molunjika ku gulu lililonse la IT ndi chitetezo. CISA a KEV mndandanda si maganizo a feduro mabungwe; ndi chenjezo lovuta kwa mabungwe onse. Musanyalanyaze izo pangozi yanu.
Chinyengo cha "AI Security" ndi Mtengo Wosokoneza
Nachi chowonadi chosasangalatsa: zolakwika zoyambira pamapulatifomu a AI ndi CISA KEV barrage ndizolumikizana pavuto lomwelo. Onse amakuwa za kusokonekera kwakukulu kwachitetezo cha mapulogalamu, koma kuyang'ana kwamakampani athu kuli kolakwika. Ndife okopeka kwambiri ndi lonjezo ndi zoopsa za "AI" kotero kuti tikulola kuti maziko a digito awole.
"AI chitetezo" chasanduka buzzword, malire atsopano kwa alangizi ndi oyang'anira malonda. Koma ndi chiyani kwenikweni? Nthawi zambiri, zimangokhala chitetezo chogwiritsidwa ntchito pamakina a AI. Inde, AI imabweretsa ma vectors atsopano ndi zovuta zapadera, koma gawo lalikulu la "AI chitetezo" ndikungopanga uinjiniya wamphamvu, machitidwe osungika otetezedwa, komanso kuyika mwachangu - zomwezo zomwe takhala tikulephera kwazaka zambiri. Nkhani yodzipatula ya VM yomwe yatchulidwa kale ndi chitsanzo chabwino: chiwopsezo chapamwamba chokulitsidwa ndi zovuta za nsanja ya AI.
Tikumanga machitidwe ovuta kwambiri a AI pamwamba pa maziko omwe akuchulukirachulukira komanso ogwiritsidwa ntchito molimbika. Zili ngati kupanga mwaluso galimoto yodziyendetsa yokha yokhala ndi mayendedwe apamwamba a AI, pomwe mawilo akugwa ndipo injiniyo ikuphulika. Kuyang'ana pa "chitetezo cha AI" nthawi zambiri kumakhala ngati kusokoneza, kusokoneza chuma komanso chidwi kuchokera kuzinthu zamba, zosasangalatsa, koma ntchito yovuta kwambiri yoteteza zida zomwe zilipo.
Sena tulabikkila maano kujatikizya cintu cimwi ncotukonzya kwiiya kujatikizya makani aaya? Kuchulukirachulukira komanso kukula kwa ziwopsezo za KEV zikuwonetsa vuto lokhazikika komanso lachangu pazoyambira za digito, zosiyana ndi zokambirana zam'mbuyomu za AI-centric zero-day. Izi sizikunena za tsogolo la AI; ndizokhudza momwe tilili panopa pa digito.
Bwanji Tsopano, ma CTO?
Kwa otsogolera mainjiniya ndi ma CTO, uthengawo ndiwowoneka bwino komanso wachangu:
- Ikani patsogolo mndandanda wa KEV: Siyani zonse. Chotsani zofooka izi. lamulani. Tsimikizirani. Izi sizosankha.
- Musatengeke ndi "AI chitetezo" hype powononga zofunikira: Inde, mvetsetsani kuopsa kwapadera kwa AI, koma kumbukirani kuti uinjiniya wamphamvu, moyo wotukuka wotetezedwa, ndikuyika mwachangu ndi chitetezo chanu chabwino. Mtundu wapamwamba wa AI sungakupulumutseni ngati wowukira ali ndi VM yanu yoyambira kapena seva yanu ya SharePoint.
- Ikani ndalama pamaziko achitetezo: Izi zikutanthauza zambiri kuposa kungogula chida china chachitetezo. Zimatanthawuza kuyika ndalama mwa anthu, njira, ndi chikhalidwe chomwe chimaona kuti chitetezo ndichofunika kwambiri, osati kungoganizira chabe. Mapulogalamu a bug bounty ndiabwino, koma ayenera kukhala otetezeka, osati njira yanu yoyamba yachitetezo.
Chochitika chokhudza maziko a nsanja ya AI ndikudzutsa, koma mndandanda wa CISA KEV ndiye alamu yachangu. Tiyenera kusiya kusirira njira zaposachedwa zachitetezo cha AI ndikuyamba kukonza mabowo pachitetezo chathu chenicheni. Tsogolo la AI ndi losangalatsa, koma momwe chitetezo chathu chilili pano ndi chowopsa.
##Magwero [1] Chitetezo cha AI ndi chosokoneza, ndipo chatsala pang'ono kuipiraipira - https://techcrunch.com/2023/10/11/ai-security-is-a-mess-and-its-about-to-get-worse/ [2] Catalog Yodziwikiratu Yogwiritsa Ntchito Zowopsa - https://www.cisa.gov/known-exploited-vulnerabilities-catalog