Programs on DUALUSE

Automating Core AppSec Tooling Dev Loops: Language Model Powered Rule Generation

Wed, 05 Jul 2023 00:00:00 +0000

This technical article explores in depth one way to layer embeddings powered k-nearest-neighbor (kNN) search, retrieval augmented generation, and specialist LLM tools to turn what might take a single engineer a month to complete into a task that completes in 40 minutes and costs less than $10 in OpenAI API credits.

Large Language Models in AppSec: An Innovator’s Primer

Tue, 30 May 2023 00:00:00 +0000

A steady stream of Fear, Uncertainty, and Doubt surrounding Large Language Models (LLMs) dominates the discourse; Leaking IP? Generated code with vulnerabilities? Verbatim extracts from GPL code? Will OpenAI employees learn about your top-secret plans? Will LLMs usher in a new era of cyber-threats? The coverage here is massive - under-amplified is where AI, and LLMs specifically, is posed to make a significant impact on how people and organizations approach application security.

Harnessing the Hive Mind: How Semgrep and Nuclei Are Shaping the Future of Security Engineering

Mon, 27 Mar 2023 00:00:00 +0000

Crowd-sourced, open source, and customization-out-front tools continue to make noise in the security tooling marketplace. These are not new developments. We, of course, know about projects like FindBugs and select projects from OWASP. However, new entrants like Semgrep from r2c and Nuclei from ProjectDiscovery feel different. What has attracted VC funding to these projects, and what’s behind the excitement and buzz generated from practitioners in the security space?