Meaghan Mcbee News Today

The use of AI to assist in software development introduces new risks into application security. Here's how to use AppSec testing tools and methods such as SAST, DAST and SCA to make sure your AI-generated code is clean.

Artificial intelligence poses a pretty scary threat to information security overall, but application-security testers should find AI to be extremely useful for finding flaws and weeding out false positives.

Developers need to build security into code from the very beginning. But over-reliance on application testing can result in fruitless races to find all vulnerabilities, including many distracting false positives. Instead, developers must be trained to espouse a consistent security mindset and to designate "security champions" on their own teams who can help them better build secure code.

Security champions can help organizations move beyond the conflict that often exists between security teams and developers. A look at how such programs work, and how to implement one.