Application Security Challenges and Opportunities with AI

This technical report discusses the evolving landscape of application security (AppSec) in the context of artificial intelligence (AI). It outlines how AI is transforming software development processes and the inherent risks associated with AI-generated code. The report highlights the rise of AI coding assistants and their impact on developer roles, emphasizing the need for new security testing methodologies tailored to AI-specific vulnerabilities. It documents findings from surveys indicating widespread adoption of AI tools among developers and security professionals, revealing that a significant percentage of organizations utilize GenAI-based solutions. Furthermore, the report details the unique risks introduced by AI, such as opaque behavior, expanded supply chains, and potential data exposure. It concludes by identifying new AppSec requirements, including enhanced security testing, awareness of toxic combinations, and updated threat modeling to address the challenges posed by AI in software development.