Eitan Worcel -- Is AI a Security Champion?

Eitan Worcel joins the Application Security Podcast, to talk automated code fixes and the role of artificial intelligence in application security. We start with a thought-provoking discussion about the consistency and reliability of AI-generated responses in fixing vulnerabilities like Cross-Site Scripting (XSS). The conversation highlights a future where AI on one side writes code while AI on the other side fixes it, raising questions about the outcomes of such a scenario. We're thrilled to host Eitan Worcel, the co founder and CEO of Mobb, and a seasoned AppSec expert with 15 years of experience. From his early days as a developer to his current role as a business leader, Eitan has been at the forefront of detecting security issues.Connect with Eitan Worcel:→ The Hard Thing About Hard Things by Ben Horowitz→ The Hard Thing About Hard Things Ben HorowitzMentioned in this episode:→ The Hard Thing About Hard Things by Ben Horowitz→ The Hard Thing About Hard Things Ben Horowitz→ ChatGPT→ AppScan Standard (HCL)→ Carnegie Mellon University Software Engineering Institute→ OWASP Juice Shop→ GitHub Copilot→ VeracodeFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Eitan Worcel: Is AI a Security Champion?02:29 Luckily it's, you know, it's not easy being me is what03:54 Understood. Understood. So typically when, uh, somebody joins us in the08:01 Yeah. I mean, I'm gonna let Robert go next though. So13:34 It's about trust. It's about, it's about like with this, with18:12 That a common thing that's happening behind the scenes in the20:13 Right, let's, uh, let's wrap back around here and start talking23:05 Then what's, how, how do things, how is it different from25:42 I mean, it sounds like that's a human function still, like28:37 I like what you just were saying about predictability because you're30:42 About how do we prevent the introduction of new vulnerabilities with32:58 Does the AI handle complex, multi layered security issues in the34:08 Yeah. I mean, that's, that's my next question. So where, you37:04 Uh, what advice would you give an organization that's trying to40:23 Yeah. Yeah. There's a privacy angle in there, uh, for the41:58 You see, um, a world in AI where we'll have the45:30 Okay. Number two, billboard message. What would it say if you