人工智慧驅動的自動化安全測試系統在最近的實驗中與領先的網路安全專家的表現相匹配

在最近的一項實驗中，在解決了相同數量的滲透測試「基準」後，人工智慧驅動的自動化安全測試系統的性能似乎與領先的網路安全專家的性能相匹配，只不過它所用的時間還不到人類同行的1.1% 。

An AI-powered automated security testing system from XBOW has seemingly matched the performance of leading cybersecurity experts in a recent experiment after solving the same number of penetration-testing “benchmarks” — except doing it in less than 1.1% of the time it took its human counterparts.

XBOW 的人工智慧自動安全測試系統在解決相同數量的滲透測試「基準」後，在最近的一項實驗中似乎與領先的網路安全專家的性能相匹配，但完成該系統所需的時間還不到其所需時間的1.1%。

On Aug. 5, XBOW founder and CEO Oege de Moor published the results of an experiment in which XBOW AI’s penetration testing capabilities were measured against professional human penetration testers, or “pentesters” for short.

8月5日，XBOW創辦人兼執行長Oege de Moor公佈了一項實驗結果，其中XBOW AI的滲透測試能力與專業的人體滲透測試人員（簡稱「滲透測試人員」）進行了對比。

A penetration test is an authorized, simulated cyberattack on a computer system performed to evaluate the security of that system.

滲透測試是對電腦系統進行授權的模擬網路攻擊，旨在評估該系統的安全性。

XBOW created 104 novel benchmarks — a term for realistic security scenarios — covering various vulnerabilities designed to be unsolvable through web searches.

XBOW 創建了 104 個新穎的基準（現實安全場景的術語），涵蓋了旨在透過網路搜尋無法解決的各種漏洞。

A total of five professional human pentesters from leading cybersecurity firms were given 40 hours to solve them.

來自領先網路安全公司的總共 5 名專業人類滲透測試人員被給予 40 個小時的時間來解決這些問題。

The principal pentester, Federico Muttis, solved the same amount as the AI system. However, XBOW completed the tasks in 28 minutes, compared to the 40 hours it took Muttis to complete.

首席滲透測試人員 Federico Muttis 解決了與人工智慧系統相同的問題。然而，XBOW 在 28 分鐘內完成了任務，而 Muttis 則需要 40 小時才能完成。

“I just learned that XBOW got as many solves as I did. I am shocked. I expected it would not be able to solve some of the challenges I tackled at all, ” said Muttis.

「我剛剛了解到 XBOW 解決的問題和我一樣多。我很震驚。我預計它根本無法解決我遇到的一些挑戰，」穆蒂斯說。

A pentester is a cybersecurity professional who specializes in testing the security of computer systems, networks, and web applications.

滲透測試人員是網路安全專業人員，專門測試電腦系統、網路和 Web 應用程式的安全性。

Pentesters are typically white hat or “ethical” hackers who use the same tools and techniques that malicious hackers might use, but for defensive purposes.

滲透測試人員通常是白帽或「道德」駭客，他們使用與惡意駭客可能使用的相同工具和技術，但出於防禦目的。

The advantage the AI has over its human counterparts is that it can run continuously during software development, unlike infrequent human pentesting.

人工智慧相對於人類同行的優勢在於，它可以在軟體開發過程中持續運行，這與不頻繁的人類滲透測試不同。

de Moor explained that the approach “ensures that vulnerabilities are identified and addressed while the system is still under development, well before bad actors have a chance to exploit them.”

德摩爾解釋說，這種方法“確保在系統仍在開發過程中，早在壞人有機會利用這些漏洞之前就識別和解決漏洞。”

Several security experts say advancements in AI-powered security testing could be a major benefit to the crypto industry, which has already been plagued by over $1.4 billion in hacks so far this year.

幾位安全專家表示，人工智慧驅動的安全測試的進步可能會為加密產業帶來重大好處，今年迄今為止，加密產業已經遭受了超過 14 億美元的駭客攻擊。

CertiK Chief Security Officer Kang Li told Cointelegraph Magazine that crypto exchanges, wallets, and blockchain platforms could benefit from continuous AI-driven security testing specifically when it comes to the auditing of smart contracts and other crypto security systems.

CertiK 首席安全官 Kang Li 告訴 Cointelegraph 雜誌，加密貨幣交易所、錢包和區塊鏈平台可以從持續的人工智慧驅動的安全測試中受益，特別是在智慧合約和其他加密安全系統的審計方面。

Magazine: Meet the hackers who can help get your crypto life savings back

雜誌：認識可以幫助您拿回加密貨幣畢生積蓄的駭客