{"id":103375,"date":"2022-02-18T09:36:49","date_gmt":"2022-02-18T07:36:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/github-vnedril-sistemu-mashinnogo-obucheniya-dlya-poiska-uyazvimostej-v-kode"},"modified":"2022-02-18T09:36:49","modified_gmt":"2022-02-18T07:36:49","slug":"github-vnedril-sistemu-mashinnogo-obucheniya-dlya-poiska-uyazvimostej-v-kode","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/github-vnedril-sistemu-mashinnogo-obucheniya-dlya-poiska-uyazvimostej-v-kode","title":{"rendered":"GitHub zavedl syst\u00e9m strojov\u00e9ho u\u010den\u00ed pro vyhled\u00e1v\u00e1n\u00ed zranitelnost\u00ed v k\u00f3du","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub ozn\u00e1mil p\u0159id\u00e1n\u00ed experiment\u00e1ln\u00edho syst\u00e9mu strojov\u00e9ho u\u010den\u00ed do slu\u017eby Code scanning, kter\u00fd slou\u017e\u00ed k identifikaci b\u011b\u017en\u00fdch typ\u016f zranitelnost\u00ed v k\u00f3du. B\u011bhem testov\u00e1n\u00ed je nov\u00e1 funkce zat\u00edm dostupn\u00e1 pouze pro repozit\u00e1\u0159e s k\u00f3dem napsan\u00fdm v JavaScriptu a TypeScriptu. Je poznamen\u00e1no, \u017ee pou\u017eit\u00ed syst\u00e9mu strojov\u00e9ho u\u010den\u00ed umo\u017enilo v\u00fdrazn\u011b roz\u0161\u00ed\u0159it spektrum identifikovan\u00fdch probl\u00e9m\u016f, p\u0159i\u010dem\u017e anal\u00fdza nyn\u00ed nen\u00ed omezena na kontrolu typick\u00fdch vzor\u016f a nen\u00ed v\u00e1z\u00e1na na zn\u00e1m\u00e9 frameworky. Mezi identifikovan\u00e9 probl\u00e9my nov\u00fdm syst\u00e9mem pat\u0159\u00ed chyby vedouc\u00ed k meziwebov\u00e9mu skriptov\u00e1n\u00ed (XSS) a zkreslen\u00ed cest k soubor\u016fm (nap\u0159\u00edklad skrze ur\u010den\u00ed «\\\/..»), substituce SQL a NoSQL dotaz\u016f. <\/p>\n

Slu\u017eba Code scanning umo\u017e\u0148uje identifikovat zranitelnosti v ran\u00e9 f\u00e1zi v\u00fdvoje prost\u0159ednictv\u00edm skenov\u00e1n\u00ed ka\u017ed\u00e9 operace «git push» na p\u0159\u00edtomnost potenci\u00e1ln\u00edch probl\u00e9m\u016f. V\u00fdsledek je p\u0159\u00edmo p\u0159ipojen k pull requestu. D\u0159\u00edve se kontrola prov\u00e1d\u011bla pomoc\u00ed enginu CodeQL, kter\u00fd analyzoval vzory s typick\u00fdmi p\u0159\u00edklady zraniteln\u00e9ho k\u00f3du (CodeQL umo\u017e\u0148uje vytvo\u0159it vzor zraniteln\u00e9ho k\u00f3du pro identifikaci p\u0159\u00edtomnosti podobn\u00e9 zranitelnosti v k\u00f3du jin\u00fdch projekt\u016f). Nov\u00fd engine, vyu\u017e\u00edvaj\u00edc\u00ed strojov\u00e9 u\u010den\u00ed, m\u016f\u017ee identifikovat d\u0159\u00edve nezn\u00e1m\u00e9 zranitelnosti, proto\u017ee nen\u00ed v\u00e1z\u00e1n na proch\u00e1zen\u00ed vzor\u016f k\u00f3du popisuj\u00edc\u00edch konkr\u00e9tn\u00ed zranitelnosti. Cena za tuto mo\u017enost je vy\u0161\u0161\u00ed po\u010det fale\u0161n\u00fdch poplach\u016f v porovn\u00e1n\u00ed s kontrolami zalo\u017een\u00fdmi na CodeQL.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441 Code scanning \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435. \u041d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0441 \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u044f\u0437\u044b\u043a\u0430\u0445 JavaScript \u0438 TypeScript. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0442\u044c \u0441\u043f\u0435\u043a\u0442\u0440 \u0432\u044b\u044f\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0442\u0435\u043f\u0435\u0440\u044c \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103375","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub zavedl syst\u00e9m strojov\u00e9ho u\u010den\u00ed pro vyhled\u00e1v\u00e1n\u00ed zranitelnost\u00ed v k\u00f3du | ProHoster","description":"GitHub ozn\u00e1mil p\u0159id\u00e1n\u00ed experiment\u00e1ln\u00edho syst\u00e9mu strojov\u00e9ho u\u010den\u00ed do slu\u017eby Code scanning, kter\u00fd slou\u017e\u00ed k odhalov\u00e1n\u00ed b\u011b\u017en\u00fdch typ\u016f zranitelnost\u00ed v k\u00f3du.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/github-vnedril-sistemu-mashinnogo-obucheniya-dlya-poiska-uyazvimostej-v-kode","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0432\u043d\u0435\u0434\u0440\u0438\u043b \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435 | ProHoster","og:description":"GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441 Code scanning \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0434\u0435.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/github-vnedril-sistemu-mashinnogo-obucheniya-dlya-poiska-uyazvimostej-v-kode","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-02-18T07:36:49+00:00","article:modified_time":"2022-02-18T07:36:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103375","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-02-18 07:37:39","updated":"2022-09-28 10:24:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/103375","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=103375"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/103375\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=103375"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=103375"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=103375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}