Shulou(Shulou.com)11/24 Report--

CTOnews.com, October 30 (Xinhua)-- Security company and vulnerability reward platform HackerOne released its 2023 Hacker Security report (Hacker-Powered Security Report) last week and found that 61% of white customers are using generative AI to develop various hacker tools to discover more vulnerabilities.

It is reported that HackerOne launched the survey between June last year and September this year, mainly aimed at 2000 white hats who worked with the platform. The report shows that the biggest motivation for white hats to find loopholes is to make money, accounting for 80%, but up to 78% of the reasons are for learning, while another 47% said it is to "protect the safety of ordinary users."

The main reasons for the white hat failure to submit vulnerabilities include slow company response (60%), communication conflicts (55%), low bonuses (48%), and poor external reviews of the company (44%).

White hats are also interested in the emerging generative AI technology, which can both increase productivity and maintain competitiveness.

66% of white hats said they were using or preparing to use generative AI to write reports

61% of white hats are developing tools based on generative AI to discover more vulnerabilities.

55% of white hats think that the generative AI tool itself may also become a target in the next few years.

53% of the white hats said they would use generative AI to write programs.

33% of white hats use generative AI to lower the threshold of programming languages.

14% of white hats already use generative AI as an important tool.

▲ source HackerOne in the areas targeted by white hats, online services ranked first, accounting for 58%, financial services ranked second, accounting for 53%, retail and e-commerce platforms ranked third, accounting for 48%, computer software accounted for 43%, and government organizations accounted for 40%.

CTOnews.com also learned from the report that up to 95 percent of white hats master web testing capabilities, 63 percent specialize in vulnerability research, 47 percent focus on network penetration testing, 40 percent focus on red team testing, another 20 percent are good at social workers, and 18 percent are good at wireless penetration testing.

White hats mainly apply hacking technology to invading websites, accounting for 98%, of which 55% are used to attack API,43% to attack Android software, 23% to attack open source projects, and only 17% to attack iOS and desktop platforms.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.