AI is changing things, including security. This doesn’t mean it’s time to panic. It means it’s time to work. Now.
AI can be used to help find and fix vulnerabilities. What’s more, over time, AI can help software developers build software with so few vulnerabilities that it will be incredibly difficult to subvert. Software developers, and those who work with them, have an opportunity to make the world a much more secure place.
Apply what you’ve learned:
Pick your most important project. Once it’s in good shape, repeat with the next.
Prepare to find and fix vulnerabilities: prepare the AI, its sandbox, and its logging, as well as the software’s threat model, code and documentation, CI/CD processes, and dependency updates.
Find & fix vulnerabilities using AI. Apply this repeatedly, since only one or a few runs can miss important vulnerabilities.
Prevent longer-term problems through process improvements (such as evaluating every merge/pull request) and hardening (both of systems and the broader environment).
Finding and Fixing Vulnerabilities Using AI