InayofuataInayofuata katika Sera na Jamii ya AI
Usalama wa AI
Jamii
MWONGOZO wa Jamii
Usalama wa AI hulinda miundo, data, zana na huduma zinazozunguka dhidi ya ufikiaji au upotoshaji usioidhinishwa.
Sikiliza mwongozo huuInaonyeshwa na AI · ~2 min
It includes ordinary software security and threats that target learning or model behavior. A secure design begins with the assets, adversaries, and trust boundaries of the actual application.
Identify what needs protection: private inputs, training data, model artifacts, credentials, connected accounts, and external actions. Record who can influence each input and what an attacker could gain from a failure. A public chatbot and an internal agent with write access have different threat models. Threats can affect different stages. Poisoned training material can alter learned behavior; adversarial inputs can manipulate predictions; untrusted retrieved content can redirect a tool-using application. Model output can also become dangerous when inserted into a database query, webpage, or command without appropriate handling. Apply controls at the software boundary. Enforce authorization in code, keep secrets out of model-visible context where possible, restrict tool scope, and validate outputs before use. A prompt asking a model to behave safely cannot replace account isolation or permission checks. Test representative failure paths in an authorized environment and maintain an incident process. Log enough information to investigate without collecting unnecessary sensitive content. Evaluate controls after changes to the model, retrieval sources, tools, and dependencies. Describe residual risk honestly; no single filter establishes complete protection.
04Mfano uliofanya kazi
Imagine an assistant searching a private document store for a signed-in user.
Apply the user’s access filter in the retrieval service before documents enter the model context.
Test with a document belonging to a different account and verify that neither its contents nor identifying metadata appear in the result.
Nini inaonyesha
This defensive, hypothetical test checks authorization independently of the model’s willingness to follow instructions.
Check that one account cannot retrieve another account’s documents.
Validate generated fields before using them in a database operation.
Jarida halali
Hadithi tatu za AI zilizothibitishwa kila asubuhi ya wiki, zimetengenezwa kwa Kiingereza rahisi. Bila malipo daima, hakuna matangazo.
Barua pepe moja kila siku ya wiki. Jiondoe kwa bonyeza moja. Hatutauza au kushiriki anwani yako.
Jijaribu mwenyewe
Maoni ya haraka juu ya kila jibu, na cheti kinachoweza kushirikishwa na kitambulisho kinachoweza kuthibitishwa baada ya kupita kozi.
Changia elimu ya AI bila malipo. AI Understanding ni 501(c)(3) isiyo na faida — hakuna matangazo, hakuna kizuizi cha malipo, daima. Toa mchango
No. Authentication, authorization, input and output handling, tool limits, and incident response remain necessary parts of the application.
Endelea kujifunza
Miongozo zaidi imechaguliwa kwa mada hii
InayofuataInayofuata katika Sera na Jamii ya AI
Usalama wa AI
Jamii