SentinelOne 首席 AI 官 Gregor Stewart 介绍,借助 OpenAI 的能力,原本需要顶级研究员花费四到六周才能完成的恶意软件逆向工程,现在约八小时就能达到人类水平的输出。这种速度让安全团队能够调查更多恶意软件样本,把不同样本中共用的组件关联起来,从而揭示此前看似无关的威胁之间的联系。他表示,这种情报是过去负担不起的,而 OpenAI 正在把专家级网络安全能力带给开发团队的每一个人,将优势转向防御方。本页全程中文配音由 Fish Audio(s2.1-pro-free;Gregor Stewart 为「沉稳男声」音色)生成,原片人声已分离去除,保留背景声与音乐作为垫底(Demucs novocal-bed,zh-v2)。
“How much of the world of malware can I actually map?”
恶意软件的世界,我究竟能摸清多少?
— Gregor Stewart
“At the moment, we're only able to reverse very small numbers of pieces of software.”
目前我们只能逆向分析极少数软件。
— Gregor Stewart
“Something that would've taken a top flight researcher four weeks, six weeks to do, now it's doing at human-level output in something like eight hours.”
顶级研究员原本要花四到六周的工作,现在大约八小时就能达到人类水平的输出。
— Gregor Stewart
“Well, this is a relationship now between these two pieces of previously unrelated, uh, malware.”
这两个原本毫不相干的恶意软件之间,现在有了关联。
— Gregor Stewart
“That's a kind of intelligence that we were never able to afford before.”
这种情报以前我们根本负担不起。
— Gregor Stewart
“But OpenAI is shifting the advantage to defenders by providing expert level cyber capability to everyone in the development team.”
而 OpenAI 正把专家级网络安全能力交给开发团队的每一个人,把优势转向防御方。
— Gregor Stewart
可以借鉴的做法 / 启发
把耗时数周的专家级分析压缩到小时级,能让原本做不起的工作变成日常工作;评估 AI 能力时,可关注这种『成本坍缩』带来的新可能。