Keynote: Using LLMs and generative AI to fix software vulnerabilities - Asankhaya Sharma
Channel: OWASP Foundation
Date: 2023-11-14

Description
Large enterprises struggle with software vulnerabilities: complex systems, slow patching, and poor risk prioritisation lead to security weaknesses, breaches, and data exposure. In this talk, we will show how one can leverage recent advances in LLMs and generative AI to create and validate private, secure and multiple file fixes that rival even expert developers. State of the art (SOTA) AI open-source models (like StarCoder) for code generation and assistance can enable enterprises to securely and privately remediate vulnerabilities in applications without worrying about risks of using OpenAI APIs. We can now empower security and operations teams to go beyond monitoring and finding issues to being able to actually fix them, even when they do not have developer experience or access. In the near future, we foresee a world where developers are no longer the sole bearers of the application security burden - A DevLess (developer-less) Security world.

Speaker
Asankhaya Sharma, Patched.codes, Co-Founder and Chief Technology Officer

-

Managed by the OWASP® Foundation
https://owasp.org/