when

Security

An AI-powered automated security testing system has seemingly matched the performance of leading cybersecurity experts in a recent experiment after solving the same number of penetration-testing “benchmarks” — except doing it in less than 1.1% of the time it took its human counterparts.&nbsp;
On Aug. 5, XBOW founder and CEO Oege de Moor&nbsp;<a href="https://xbow.com/blog/xbow-vs-humans/" target="_blank" rel="noopener nofollow">published</a> the results of an experiment in which XBOW AI’s penetration testing capabilities were measured against professional human penetration testers, or “pentesters” for short. 
A penetration test is an authorized, simulated cyberattack on a computer system performed to evaluate the security of that system. 
XBOW created 104 novel benchmarks — a term for realistic security scenarios — covering various vulnerabilities designed to be unsolvable through web searches. 
A total of five professional human pentesters from leading cybersecurity firms were given 40 hours to solve them.
The principal pentester, Federico Muttis, solved the same amount as the AI system. However, XBOW completed the tasks in 28 minutes, compared to the 40 hours it took Muttis to complete.
<figure>
 <img src="https://s3.cointelegraph.com/uploads/2024-08/8f6cb689-6798-40ad-b488-d80832347dfc.jpg" alt="XBOW automated AI hacker matches 20-year veteran pentester in 28 minutes">
 <figcaption style="text-align: center;">
 Benchmarks used for the experiment. Source: Xbow
 </figcaption>
</figure>
“I just learned that XBOW got as many solves as I did. I am shocked. I expected it would not be able to solve some of the challenges I tackled at all, ” said Muttis.
A pentester is a cybersecurity professional who specializes in testing the security of computer systems, networks, and web applications.
Pentesters are typically white hat or “ethical” hackers who use the same tools and techniques that malicious hackers might use, but for defensive purposes.
The advantage the AI has over its human counterparts is that it can run continuously during software development, unlike infrequent human pentesting.
de Moor explained that the approach “ensures that vulnerabilities are identified and addressed while the system is still under development, well before bad actors have a chance to exploit them.” 
Related: <a href="https://cointelegraph.com/news/crypto-security-tips-social-engineering">Ethical hackers share tips on how to protect your crypto</a>
Several security experts <a href="https://cointelegraph.com/magazine/real-ai-use-cases-crypto-3-ai-smart-contract-audits-cybersecurity/">say advancements in AI-powered</a> security testing could be a major benefit to the crypto industry, which has already been <a href="https://cointelegraph.com/news/crypto-exploits-near-1-4-billion-2024-hackers-target-cefi-report">plagued by over $1.4 billion</a> in hacks so far this year. 
CertiK Chief Security Officer Kang Li told Cointelegraph Magazine that crypto exchanges, wallets, and blockchain platforms could benefit from continuous AI-driven <a href="https://cointelegraph.com/news/tether-ceo-promotes-local-ai-privacy">security testing</a> specifically when it comes to the auditing of <a href="https://cointelegraph.com/explained/what-are-smart-contract-wallets">smart contracts</a> and other crypto security systems. 
Magazine: <a href="https://cointelegraph.com/magazine/hackers-crypto-wallets-recover-savings/">Meet the hackers who can help get your crypto life savings back</a>

XBOW automated AI hacker matches 20-year veteran pentester in 28 minutes

Cointelegraph

Other articles published on Aug 8, 2024

XRP Surges 18% As Ripple Declares Victory In SEC Lawsuit Despite $125 Million Fine

Solciety vs Maga: Why SLCTY Will Be PolitiFi’s Fastest-Growing Crypto

Harris and Trump Tied at 49% Odds on Polymarket Platform

US Crypto Advocates Push for National Regulatory Guidelines to Safeguard Consumers and Boost Inno...

WazirX Restores User Balances After Cyber Attack

Decline in Bitcoin Miner Reserves After April Halving Event: Report

Join our free newsletter for daily crypto updates!