新加坡网络安全局：2024年新加坡人工智能系统安全指南（英文版）（19页）.pdf

1、 GUIDELINES ON SECURINGSECURING AI SYSTEMSAI SYSTEMS CYBER SECURITY AGENCY OF SINGAPORE OCTOBER 2024 2 GUIDELINES ON SECURING AI SYSTEMS TABLE OF CONTENTS 1.INTRODUCTION.3 1.1.PURPOSE AND SCOPE OF THIS DOCUMENT.4 2.UNDERSTANDING AI THREATS.5 3.SECURING AI .7 3.1.TAKE A LIFECYCLE APPROACH.7 3.2.START

2、 WITH A RISK ASSESSMENT.8 3.3.GUIDELINES FOR SECURING AI SYSTEMS.10 GLOSSARY.14 ANNEX A.18 3 GUIDELINES ON SECURING AI SYSTEMS 1.INTRODUCTION Artificial Intelligence(AI)poses benefits for economy,society,and national security.It has the potential to drive efficiency and innovation in almost every se

3、ctor from commerce and healthcare to transportation and cybersecurity.To reap the benefits of AI,users must have confidence that the AI will behave as designed,and outcomes are safe and secure.However,in addition to safety risks,AI systems can be vulnerable to adversarial attacks,where malicious act

4、ors intentionally manipulate or deceive the AI system.The adoption of AI can introduce or exacerbate existing cybersecurity risks to enterprise systems.These can lead to risks such as data leakage or data breaches,or result in harmful or otherwise undesired model outcomes.As such,as a key principle,

5、AI should be secure by design and secure by default,as with all software systems.This will enable system owners to manage security risks upstream.This will complement other controls and mitigation strategies that system owners may take to address the safety of AI,and other attendant considerations s

6、uch as fairness or transparency,which are not addressed here.The Cyber Security Agency of Singapore(CSA)has developed Guidelines on Securing AI Systems for system owners to secure the use of AI throughout its lifecycle.As AI is increasingly integrated into enterprise systems,security should be consi