생성형 AI를 활용한 SQL 인젝션 시큐어코딩
Secure Coding for SQL Injection Prevention Using Generative AI
0
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
생성형 인공지능은 텍스트, 이미지, 음악 등 다양한 형태의 콘텐츠를 생성하는 기술로, 다양한분야에 활용되고 있다. 보안 분야에서도 생성형 인공지능을 활용한 디지털포렌식, 악성코드 분석, 취약점분석 등 다양한 분야에 새로운 가능성을 열 준비를 하고 있다. 본 논문에서 생성형 인공지능을 보안영역을 고려한 활용방법으로 보안 취약점 분석 및 예측을 위해 ChatGPT를 활용해 취약점 식별및 시큐어 코딩이 가능한 가이드를 제시한다. 생성형 인공지능은 보안 분야에 혁신적인가능성을 제시하지만, 기술적 발전과 함께 윤리적, 법적 문제에 대한 심도있는 고민을 통해 생성형 인공지능이 안전하고 효과적으로 활용될 수 있도록 지속적인 연구와 개발이 필요할것이다.
Abstract
In this paper, Generative AI is a technology that creates various forms of content such as text, images, and music, and is being utilized across different fields. In the security sector, generative AI is poised to open up new possibilities in various areas including security vulnerability analysis, malware detection and analysis, and the creation and improvement of security policies. This paper presents a guide for identifying vulnerabilities and secure coding using ChatGPT for security vulnerability analysis and prediction, considering the application of generative AI in the security domain. While generative AI offers innovative possibilities in the security field, it is essential to continuously pursue research and development to ensure safe and effective utilization of generative AI through in-depth consideration of ethical and legal issues accompanying technological advancements.
참고문헌 (18)
- "Population Projections for Nationals and Foreigners Reflecting the 2021 Future Population Projections: 2020~2040" (2022)[URL]
- S. B. Son, "Trends in Autonomous Course of Action for Cyber Attacks Using Reinforcement Learning", The Journal of Korea Information and Communications Society, 11, pp.1776~1787 (2022)[DOI]
- J. M. Suh, "Inducing Harmful Speech in Large Language Models through Korean Malicious Prompt Injection Attack", The Journal of Korea Institute of Information Security & Cryptology, 34(3), pp.451~461 (2024)[DOI]
- Y. Tian, "ChartGPT: Leveraging LLMs to Generate Charts from Abstract Natural Languag", The Journal of IEEE Transactions on Visualization and Computer Graphics, (1), pp.1~15 (2024)[DOI]
- J. K. Lee, "Proposal Of Ai-Based Anomaly Detection Model For V2X Communication Section", Proceeding of the Platform Technology Conferences, 10(2), pp.25~30 (2023)
- J. S. Choi, "Analysis on Domestic Secure Coding Rule using Secure Coding Rule Selection Evaluation Mode", The Journal of Security Engineering, 11(4), pp.325~338 (2014)[DOI]
- "The State of AI and Security Survey Report"[URL]
- "Software Development Security Guide" (2021)[URL]
- I. S. Jeon, "Development of Block-based Code Generation and Recommendation Model Using Natural Language Processing Model", The Journal of the Korean Association of Information Education, 26(3), pp.197~207 (2022)[DOI]
- Y. J. Lee, "Research on evasion attacks and LLM intrusion prevention models in GPT 4.0", Journal of the Korea Academia-Industrial cooperation Society, 25(3), pp.10~15 (2024)[DOI]
- L. Kree, "International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment", pp.64~83 (2024)
- D. Fucci, "Evaluating software security maturity using OWASP SAMM : Different approaches and stakeholders perceptions", The Journal of Systems and Software, 214, pp.112062~ (2024)[DOI]
- E. Y. Yang, "Necessity of regulation on the development and use of generative AI -Focusing on Large language Models conversational A.I. services (LLMs AI)-", The Journal of SungKyunKwan Law Review, 35(2), pp.293~325 (2023)[DOI]
- Y. T. Oh, "Data Modeling for Cyber Security of IoT in Artificial Intelligence Technology", The Journal of the Korea Contents Association, 21(12), pp.57~65 (2021)[DOI]
- K. S. Ko, "Application of Integrated Security Control of Artificial Intelligence Technology and Improvement of Cyber-Threat Response Process", The Journal of the Korea Contents Association, 21(10), pp.59~66 (2021)[DOI]
- S. Hamer, "Just another copy and paste? Comparing the security vulnerabilities of ChatGPT generated code and StackOverflow answers", 2024 IEEE Security and Privacy Workshops (SPW), pp.87~94 (2024)
- M. Jamdade, "A Pilot Study on Secure Code Generation with ChatGPT for Web Applications", Proceedings of the 2024 ACM Southeast Conference, pp.229~234 (2024)
- T. D. J. M. Sanguino, "Enhancing Security in Industrial Application Development : Case Study on Self-Generating Artificial Intelligence Tools", The Journal of Applied Sciences, 14(9), pp.1~18 (2024)[DOI]