Byagenze bite
Ubushakashatsi bushya bwa arXiv busuzuma uburyo imiterere yindimi za kodegisi zishobora guhimba amazina ya pake ya Python abateye bashobora kuba baranditse kuri PyPI. Abanditsi basabye icyuma gikomatanya guhuza igenamigambi-kubaho, kugenzura ishyamba ry’ishyamba, hamwe n’iyunga ryinjira mu mahanga, hamwe n’ibisubirwamo hamwe nuburyo bwo gusubira inyuma iyo gutsindwa bikomeje.
Uru rupapuro rwashyikirijwe arXiv ku ya 24 Kanama, ruvuga ko imiterere y’ururimi rwa code rimwe na rimwe ihimba amazina ya pake ya Python. Impungenge z'umutekano ni uko uwagabye igitero ashobora kubanza kwandikisha rimwe muri ayo mazina kuri PyPI, bigatera uwatezimbere cyangwa ikora coding yimikorere kugirango ashyireho ibintu bitateganijwe. Abanditsi bavuga kuri ubu buryo nka “slopsquatting.” Inkomoko yerekana akazi nkicyifuzo cyo kwirwanaho hamwe nubushakashatsi bufatika, ntabwo ari ibimenyetso byerekana ubwumvikane buke mu gasozi.
Umuyoboro uteganijwe ufite ibice bibiri byerekana. Ubwa mbere, ikora igenzura ryerekana niba izina rya paki rihari kuri PyPI. Icya kabiri, Ishyamba ryamashyamba risanzwe risuzuma ibintu 10 biva mwizina rya pake hamwe na PyPI metadata. Kwiyunga-gutumiza-izina bigamije gukemura ibibazo aho izina rikoreshwa muri kode ritandukanye n'izina ryakoreshejwe mugushiraho, nka "kwinjiza cv2" na "imiyoboro yo gushiraho opencv-python." Abanditsi bashyira disiketi imbere muri mashini ya leta ya LangGraph igaruka ku bushyuhe bwo hejuru kandi, nyuma yo kunanirwa inshuro nyinshi, iyobora umurimo ku buryo bukomeye bwo gusubira inyuma.
Hafi ya 300 yatunganijwe, abanditsi bavuga ko umuyoboro watanze kode idafite salusiyo kuri 76%. Icyitegererezo cyibanze cyakoresheje ingengo yimari yacyo yose kuri 28.7% yimikorere. Imbere-moderi yagaruye yagaruye hafi kimwe cya kane cyizo manza, mugihe gusubira inyuma kwicyitegererezo byagaruye ibindi 16.5% byatsinzwe. Iyi mibare isobanura isuzuma ryubushakashatsi; ibisobanuro ntabwo byerekana uburyo ibisubizo byahindurwa kubafasha ba coding bafasha, kwiyandikisha bitandukanye, cyangwa ibyifuzo byabatezimbere.
Ubushakashatsi butanga raporo enye ziyongereye. Kimwe cya kabiri cya salusiyo yamanitswe yari paki zimaze kwandikwa kuri PyPI, harimo ubuziranenge buke bwo kureba imishinga izwi nka pil, faiss, tabula, na nyakatsi. Ibipimo bya salusiyo byari hagati ya 0-10% kuri progaramu ya code isanzwe igera kuri 40-73% kubisobanuro byakozwe nkibisambo. Icyitegererezo cyibanze cyanze kwanga itandatu kuri 10 itaziguye nta mfashanyo. Iyo moderi yibanze nugusubira inyuma yari iyumuryango umwe, hafi 84% byatsinzwe byambere byagarutse kugaruka, nkuko impapuro zibitangaza.
Ubushakashatsi bw’abakoresha burimo abantu 24 bwatangaje ko bushimishijwe na 4.4 kuri 5, abitabiriye 21 bagaragaza ubushake bwo gukoresha sisitemu. Ibisubizo bigarukira kubunini bw'icyitegererezo no kubura ibisobanuro birambuye kubitabiriye amahugurwa, imirimo, imiterere yo kugereranya, hamwe nubusobanuro bwo gushaka kurera. Uru rupapuro ruvuga kandi ko kode namakuru bihari, ariko isoko yatanzwe hano ntabwo yigenga kugenzura ishyirwa mubikorwa cyangwa kubyara ibisubizo byatangajwe.
Ibisobanuro birambuye: arxiv.org ↗
Impamvu ari ngombwa
Ibyavuye mu bushakashatsi bihuza ikimenyane cyururimi-icyitegererezo-cyerekana kode ishingiye kuri kode-yingirakamaro ya software. Ubushakashatsi bwerekana ko kugenzura niba paki ibaho bidahagije, kubera ko ibipapuro bibi cyangwa ubuziranenge buke busa bushobora kwandikwa munsi yizina icyitegererezo cyerekana.
Ibyago nyamukuru ntabwo aruko gusa umufasha wa code ya AI yandika code yananiwe. Kubaho bitabaho bishobora gutera ikosa rigaragara. Ikibazo kitoroshye kivuka mugihe icyitegererezo cyahimbye izina ryumvikana kandi uwagabye igitero yarabyanditse. Ipaki yavuyemo irashobora kuba ntaho ihuriye nibikorwa bigenewe, ubuziranenge buke, cyangwa bubi. Muri icyo gihe, igitekerezo cyicyitegererezo cyizere ariko kitari cyo gishobora guhinduka aho cyinjira murwego rwo gutanga software.
Uru rupapuro rwasanze kimwe cya kabiri cyibimenyetso bya salusiyo byari bimaze kwandikwa kubintu bifite akamaro kuko kubaho kwa paki nikizamini cyumutekano kituzuye. Gushakisha kwiyandikisha birashobora gutandukanya izina ritaboneka nizina riboneka, ariko ntirishobora kwonyine kwemeza ko paki iboneka ariwo mushinga ugenewe cyangwa ufite umutekano wo gukoresha. Ibyifuzo bya metadata byashyizwe ahagaragara bikemura icyo cyuho mubishushanyo mbonera byubushakashatsi, nubwo isoko idatanga ibisobanuro byayo, kwibutsa, igipimo cyiza-cyiza, cyangwa imikorere irwanya nkana ibipapuro byoroshye.
Kuzamuka kwizamuka ryibipimo bya salusiyo biterwa no guhangana nabyo bitanga ikibazo murwego rwumutekano. Ibyifuzo bya code byateganijwe byatanze ibiciro biri hasi, mugihe ibyambo byoroheje byatanze umusaruro mwinshi cyane. Ibisobanuro ntibisobanura ubwubatsi bwihuse cyangwa kwerekana uburyo ibyo byambo bisa nibitero abaterankunga bahura nabyo. Nubwo bimeze bityo, ibisubizo bishyigikira gufata ibyashingiweho nkibisubizo byumutekano aho kubyemera nkibisanzwe byuzuye.
Gusubira inyuma nabyo bigora ingamba rusange zo kugabanya. Niba icyitegererezo cyibanze hamwe no gusubira inyuma gusangira umuryango wintangarugero, ubushakashatsi buvuga ko hafi 84% byatsinzwe byambere bigaruka mugusubira inyuma. Gukoresha icyitegererezo cya kabiri rero birashobora gutanga ubwigenge buke kurenza uko byari byitezwe mugihe sisitemu zombi zifite amakuru asa namahugurwa, imyitwarire, cyangwa amazina-yamashyirahamwe. Ibisubizo by'uru rupapuro byerekana ko umuryango urenze, ariko ntugaragaza niba imiterere y'imiryango itandukanye ifite ibipimo bitandukanye by'amakosa y'umutekano mubikorwa binini cyangwa bifatika.
Kubateza imbere nimiryango, isomo ryihuse nuburyo bukurikira: ibyifuzo byatanzwe byapimwe bigomba kugenzurwa kubigenewe umushinga, izina ryubwubatsi, ibimenyekanisha, amateka yo kubungabunga, hamwe nubugenzuzi bwumutekano mbere yo gukoreshwa. Inkomoko ntivuga ko disiketi yayo ikuraho ingaruka zitangwa. Ibisubizo byayo 76% bidafite ishingiro bivuze kunanirwa kuguma mu isuzuma, kandi ubushakashatsi ntibwerekana niba amakosa asigaye yaba yarateje kwishyiriraho umutekano.
Uburyo bukoreshwa: Uburyo bukora
Shakisha ikoranabuhanga ryihishe inyuma yiri terambere.
crm_get_transaction(id='4092').Which component of an AI application is the machine-learning model itself?
Ibyo kureba
Ubushakashatsi bukeneye ibizamini byagutse birenze 300 byateganijwe hamwe nubushakashatsi buke bwabakoresha. Ibibazo byingenzi bikurikiraho birimo kumenya niba detector ikora mu ndimi za porogaramu, iyandikwa rya paki, imiryango yintangarugero, hamwe niterambere ryukuri, kandi niba abateye bashobora guhunga metadata ishingiye kumurongo.
Intambwe ikurikiraho yo kugenzura niyigenga kwigana kuri binini, bidakosowe byihuse. Ubushakashatsi bwakoresheje ibisobanuro 300 byahinduwe, harimo kuriganya, ariko inkomoko ntivuga umubare w'ibyifuzo byasuzumwe, uko byatanzwe, cyangwa niba igipimo cyerekana imirimo rusange yiterambere. Kwigana bigomba gupima ingaruka zabuze ndetse no kuburira bitari ngombwa, kubera ko icyuma gikabije gishobora guhagarika imirimo yemewe cyangwa gushishikariza abayikoresha kurenga.
Abashakashatsi n'abubaka ibikoresho bagomba kugerageza gushyira mubikorwa kurwanya uburiganya-amazina yibeshya ateganijwe nkana imishinga yizewe. Ibisobanuro byerekana ubuziranenge busa kandi bukoresha pake metadata nkibisobanuro byinjira, ariko ntibigaragaza ibintu 10 cyangwa raporo yibyiciro birambuye. Ibyo bisobanuro nibyingenzi mugusuzuma niba uwagabye igitero ashobora gukoresha pake metadata, gukora izina ryemeza, cyangwa gukoresha itandukaniro riri hagati yizina ryatumijwe nizina ryubwubatsi.
Icyitegererezo gitandukanye nikindi kibazo gifunguye. Ubushakashatsi buvuga ko byagarutsweho cyane mugihe icyitegererezo cyibanze nugusubira inyuma bisangiye umuryango, mugihe gusubira inyuma kwicyitegererezo byagaruye bimwe byananiranye. Ntabwo igaragaza imiryango yicyitegererezo yageragejwe, niba gusubira inyuma byari bikomeye kubera ubushobozi cyangwa amahugurwa atandukanye, cyangwa uburyo imikorere ihinduka mugihe moderi zivugururwa. Isuzuma ry'ejo hazaza rigomba gutandukanya ubushobozi bw'icyitegererezo, ubwigenge bw'icyitegererezo, ubushakashatsi bushingiye ku bushyuhe, n'ingaruka zo kugenzura.
Urwego rugomba kandi kwaguka kurenga Python na PyPI. Ibikorwa bya software bigezweho biva mubitabo byinshi byanditse, ububiko bwigenga, sisitemu-sisitemu yububiko, ibikoresho, hamwe na kode ya kode. Urupapuro rwinjiza-izina rwiyunga rukemura ikibazo kimwe cya Python, ariko inkomoko ntisobanura niba uburyo bukoreshwa mubindi binyabuzima cyangwa kubitangwa bitangwa binyuze mubiyandikishije byigenga cyangwa imbere.
Hanyuma, ibimenyetso bifatika byoherejwe biracyabura. Ubushakashatsi bwabakoresha bwerekana kunyurwa no kuvuga kubushake bwo kurera, ariko bwarimo abantu 24 gusa kandi ntibwerekana ko abakoresha bahitamo kwishingikiriza kumutekano mugihe runaka. Igikorwa cyingirakamaro cyo gukurikirana cyapima imyitwarire nyayo yo kwishyiriraho, kuburira gusobanukirwa, umunaniro-mwiza, kandi niba abaterankunga bakomeje kugenzura ibipaki mugihe detector idahari cyangwa idashidikanywaho. Kugeza icyo gihe, ibyagaragaye bishyigikira ubundi buryo bwo kurinda no kugenzura, ntabwo bivuze ko kodegisi ya LLMs ishobora gucunga neza porogaramu zishingiye kuri software wenyine.