人工智能驱动的自动化安全测试系统在最近的实验中与领先的网络安全专家的表现相匹配

在最近的一项实验中，在解决了相同数量的渗透测试“基准”后，人工智能驱动的自动化安全测试系统的性能似乎与领先的网络安全专家的性能相匹配，只不过它所用的时间还不到人类同行的 1.1% 。

An AI-powered automated security testing system from XBOW has seemingly matched the performance of leading cybersecurity experts in a recent experiment after solving the same number of penetration-testing “benchmarks” — except doing it in less than 1.1% of the time it took its human counterparts.

在最近的一项实验中，XBOW 的人工智能驱动的自动化安全测试系统在解决了相同数量的渗透测试“基准”后，其性能似乎与领先的网络安全专家的性能相匹配，但完成该系统所需的时间还不到其所需时间的 1.1%。人类同行。

On Aug. 5, XBOW founder and CEO Oege de Moor published the results of an experiment in which XBOW AI’s penetration testing capabilities were measured against professional human penetration testers, or “pentesters” for short.

8月5日，XBOW创始人兼首席执行官Oege de Moor公布了一项实验结果，其中XBOW AI的渗透测试能力与专业的人体渗透测试人员（简称“渗透测试人员”）进行了对比。

A penetration test is an authorized, simulated cyberattack on a computer system performed to evaluate the security of that system.

渗透测试是对计算机系统进行授权的模拟网络攻击，旨在评估该系统的安全性。

XBOW created 104 novel benchmarks — a term for realistic security scenarios — covering various vulnerabilities designed to be unsolvable through web searches.

XBOW 创建了 104 个新颖的基准（现实安全场景的术语），涵盖了旨在通过网络搜索无法解决的各种漏洞。

A total of five professional human pentesters from leading cybersecurity firms were given 40 hours to solve them.

来自领先网络安全公司的总共 5 名专业人类渗透测试人员被给予 40 个小时的时间来解决这些问题。

The principal pentester, Federico Muttis, solved the same amount as the AI system. However, XBOW completed the tasks in 28 minutes, compared to the 40 hours it took Muttis to complete.

首席渗透测试人员 Federico Muttis 解决了与人工智能系统相同的问题。然而，XBOW 在 28 分钟内完成了任务，而 Muttis 则需要 40 个小时才能完成。

“I just learned that XBOW got as many solves as I did. I am shocked. I expected it would not be able to solve some of the challenges I tackled at all, ” said Muttis.

“我刚刚了解到 XBOW 解决的问题和我一样多。我很震惊。我预计它根本无法解决我遇到的一些挑战，”穆蒂斯说。

A pentester is a cybersecurity professional who specializes in testing the security of computer systems, networks, and web applications.

渗透测试人员是网络安全专业人员，专门测试计算机系统、网络和 Web 应用程序的安全性。

Pentesters are typically white hat or “ethical” hackers who use the same tools and techniques that malicious hackers might use, but for defensive purposes.

渗透测试人员通常是白帽或“道德”黑客，他们使用与恶意黑客可能使用的相同工具和技术，但出于防御目的。

The advantage the AI has over its human counterparts is that it can run continuously during software development, unlike infrequent human pentesting.

人工智能相对于人类同行的优势在于，它可以在软件开发过程中持续运行，这与不频繁的人类渗透测试不同。

de Moor explained that the approach “ensures that vulnerabilities are identified and addressed while the system is still under development, well before bad actors have a chance to exploit them.”

德摩尔解释说，这种方法“确保在系统仍在开发过程中，早在坏人有机会利用这些漏洞之前就识别和解决漏洞。”

Several security experts say advancements in AI-powered security testing could be a major benefit to the crypto industry, which has already been plagued by over $1.4 billion in hacks so far this year.

几位安全专家表示，人工智能驱动的安全测试的进步可能会给加密行业带来重大好处，今年迄今为止，加密行业已经遭受了超过 14 亿美元的黑客攻击。

CertiK Chief Security Officer Kang Li told Cointelegraph Magazine that crypto exchanges, wallets, and blockchain platforms could benefit from continuous AI-driven security testing specifically when it comes to the auditing of smart contracts and other crypto security systems.

CertiK 首席安全官 Kang Li 告诉 Cointelegraph 杂志，加密货币交易所、钱包和区块链平台可以从持续的人工智能驱动的安全测试中受益，特别是在智能合约和其他加密安全系统的审计方面。

Magazine: Meet the hackers who can help get your crypto life savings back

杂志：认识一下可以帮助您拿回加密货币毕生积蓄的黑客