In this episode of the Cybersecurity Awesomeness Podcast, Chris Steffen and Ken Buckler discuss the integration of AI in audits and compliance with guest Sam Kumar from OpenText. They explore the challenges faced in Static Application Security Testing (SAST), the role of human auditors, and how AI can enhance the auditing process. The conversation highlights best practices for overcoming SAST challenges and the benefits of leveraging AI to improve accuracy and efficiency in vulnerability detection.

Key Takeaways:

  • AI is designed to enable humans, not replace them.
  • SAST processes are often bottlenecked by human auditing.
  • The skills shortage in security makes scaling difficult.
  • Machine learning can significantly speed up auditing processes.
  • AI can achieve high accuracy in identifying vulnerabilities.
  • Audit Assistant from OpenText leverages AI for better results.
  • Higher recall rates in AI models reduce false negatives.
  • Reducing false positives is crucial for efficient auditing.

Chapters:

00:00 Introduction to Cybersecurity Awesomeness Podcast
00:55 The Role of AI in Audits and Compliance
02:47 Challenges with Static Application Security Testing (SAST)
05:56 Best Practices for Overcoming SAST Challenges
09:07 Leveraging AI for Enhanced Audit Assistance
11:53 Benefits of AI in the Development Lifecycle