I-NIST ibhala umhlahlandlela wokusebenzisa i-AI ekuhlaziyweni kwe-Cybersecurity Framework

Kwenzekeni

I-ExecutiveGov ibika ukuthi i-NIST ishicilele umhlahlandlela wokuqala osheshayo wokusebenzisa i-AI ekhiqizayo ekuhlaziyeni nasekubikeni kweCybersecurity Framework 2.0. Uhlaka luchaza imiyalo ehlelekile kanye nokusetshenziswa okuthathu okucatshangwayo: ukubuyekezwa kwezinqubomgomo kanye nokulawulwa kobungozi, ukwakha iphrofayili yesimo samanje, kanye nokuhlela iphrofayili yezwe eliqondiwe. I-NIST kubikwa ukuthi yamukela amazwana kuze kube ngu-Oct. 15.

I-ExecutiveGov ibika ukuthi iNational Institute of Standards and Technology ikhiphe umhlahlandlela wokuqala othi “QuickStart Guide for Use Artificial Intelligence for Cybersecurity Framework Analysis and Reporting.” Ngokusho komthombo, umhlahlandlela ugxile ekusebenziseni i-AI ekhiqizayo ene-Cybersecurity Framework 2.0, uhlaka lwe-NIST lokusiza izinhlangano zilawule futhi zixhumane nengcuphe yokuphepha ku-inthanethi. Umbiko ubonisa ukushicilelwa njengokusalungiswa futhi uthi isikhathi sokubuyekeza sifinyelela ku-Oct. 15. Le akhawunti ayizange iqinisekiswe ngokuzimela kusukela kudokhumenti eyinhloko ye-NIST enikezwe indaba.

Umhlahlandlela obikiwe ugxile ekuguquleni okokufaka kwenhlangano okujwayelekile kube imiphumela ehlelekile ye-CSF 2.0. I-ExecutiveGov ithi iqukethe imiyalo ehlelekile ye-AI eklanyelwe ukuhumusha ulwazi lolimi lwemvelo lube yimiphumela yohlaka olucacisiwe. I-athikili iphinde ithi i-NIST ihlanganisa amafayela enhlangano alingisa enkampani engelona iqiniso, izibonelo, namathiphu ahloselwe ukusiza abasebenzisi ukuthi baqale ukusebenzisa indlela. Leyo mininingwane iphakamisa ukuthi idokhumenti iyafundisa futhi iyahlola, kunobufakazi bokuthi i-NIST igunyaze uhlelo oluthile lwezohwebo lwe-AI noma isungule indinganiso ezenzakalelayo elungele ukukhiqiza.

I-ExecutiveGov ichaza amacala amathathu okusetshenziswa okunengqondo. Esokuqala sibandakanya ukubuyekeza inqubomgomo ye-cybersecurity yenhlangano, isu, kanye nokulawulwa kwengozi ngokumelene nemiphumela ye-CSF 2.0. Okwesibili kusebenzisa izinto zobuciko zenhlangano kanye namanothi engxoxo nabasebenzi ukuze kwakheke iphrofayili yesimo samanje esisalungiswa, kuyilapho kuqoshwa okucatshangwayo, izikhala zobufakazi, nezikhala ezingxoxweni. Okwesithathu kumayelana nephrofayili yezwe okuhloswe ngalo: ukusebenzisa izinkomba zangaphakathi nezimboni ukuchaza imiphumela efiselekayo yokuphepha ku-inthanethi, izinjongo zemishini, okulindelwe ababambiqhaza, ubungozi obaziwayo, kanye nezidingo.

Umthombo awuwahlonzi amamodeli we-AI, abathengisi, izindawo zesofthiwe, amasethi edatha okuhlola, noma izilawuli zokuphepha ezisetshenziselwa ukukhiqiza izibonelo. Futhi ayibiki ukunemba okulinganiselwe, ukonga isikhathi, izilinganiso zamaphutha, imiphumela yokubuyekezwa kochwepheshe, noma ukuthunyelwa kwenhlangano eqanjwe igama. I-athikili ithi i-NIST isanda kushicilela uhlaka lokuqala lwephrofayili ye-CSF egxile ku-AI, kodwa ayichazi ukuthi lokho okusalungiswa okuhlukile kuyingxenye yomhlahlandlela oqala ngokushesha noma ukuthi le mibhalo emibili ihlobana kanjani. Lokhu okweqiwe kukhawulela lokho okungaphethwa mayelana nokulungela ukusebenza.

Imininingwane yomthombo: executivegov.com ↗

Kungani kubalulekile

Uhlaka lunganikeza amaqembu ezokuphepha ku-inthanethi indlela ephindaphindwayo yokusebenzisa i-AI ukuhlela ubufakazi nokulungiselela izinto ezihlobene nohlaka. Inani layo elisebenzayo lincike ekutheni abasebenzisi bakuqinisekisa kanjani ukumepha okukhiqizwa yi-AI, bavikele ulwazi olubucayi, futhi bahlukanise ubufakazi obubhaliwe kusukela ekuqagelweni. Umbiko awuqinisekisi ukuthi i-NIST iqinisekise le ndlela ezinhlanganweni ezibukhoma.

Isiphakamiso esibikiwe sibalulekile ngoba ukuhlaziywa kwe-CSF kuvame ukudinga ukuqoqwa kobufakazi obuvela kuzinqubomgomo, izinqubo, izingxoxo, uhlu lwezimpahla, namarekhodi engozi ngaphambi kokuba inhlangano ichaze ukuma kwayo kwamanje noma ichaze isimo esiqondiwe. Ukugeleza komsebenzi okuhlelekile kwe-AI kungasiza ongoti ukuthi bahlele lezo zinsiza futhi bakhombe ubufakazi obungekho. Inzuzo engaba khona iwukungaguquguquki kokuphatha nokuhlaziya, hhayi ukwenza izinqumo ezizimele zokuphepha ku-inthanethi. I-athikili ayinikezi ubufakazi bokuthi umhlahlandlela uvumela isistimu ye-AI ukuthi ihlole ngokuzimele noma ilungise ubuthakathaka bokuphepha.

Ukugcizelela okusalungiswa okubikiwe ekubhaleni okucatshangwayo kanye nezikhala eziphawuliwe kubalulekile. Amasistimu e-AI angakhiqiza amamephu abambekayo ngisho nalapho okuqukethwe komthombo kungaphelele, kungaqondakali, noma kungahambisani. Ukudinga abasebenzisi ukuthi bahlukanise ubufakazi kokucatshangwayo kungenza ukubuyekeza kube lula futhi kunciphise ingcuphe yokuthi okucatshangwayo okungaqinisekisiwe kube yingxenye yephrofayela yokuphepha esemthethweni. Kodwa-ke, i-ExecutiveGov ayisho ukuthi ingabe umhlahlandlela udinga ukucashunwa ukuze kutholwe ama-artifact, ukugunyazwa komuntu kumephu ngayinye, amalebula okuqiniseka, noma ukuhlolwa ngokumelene nokokufaka okudukisayo ngamabomu.

Kukhona nemithelela yokulawulwa kwedatha. Ukuhlaziya isimo samanje kungase kuhlanganise ulwazi olubucayi mayelana nesakhiwo sesistimu, ubungozi, izilawuli zokufinyelela, izigameko, abasebenzi, noma abahlinzeki. Umbiko awusho ukuthi izibonelo ze-NIST zikhuluma ngokusetshenziswa kwemodeli yasendaweni noma yangasese, izinqubomgomo zokugcina, izilawuli zokufinyelela, ukugawulwa kwemithi ngokushesha, ukuhlelwa kabusha, noma imikhawulo yokuthumela ulwazi lokuvikeleka ku-inthanethi kumhlinzeki we-AI wangaphandle. Ngakho-ke izinhlangano azikwazi ukuthola kulo mbiko ukuthi ukuhamba komsebenzi kuphephile kudatha eyimfihlo noma elawulwayo.

Umhlahlandlela ungaba wusizo kuma-ejensi wenhlangano nezinhlangano ezizimele esezijwayele i-CSF 2.0, kodwa izethameli zayo kanye nezinga lobuchwepheshe obudingekayo kuhlala kungacacile. Isifanekiso esisheshayo singase sehlise umgoqo ekukhiqizeni iphrofayela esalungiswa kuyilapho sikhulisa ukubaluleka kokubuyekezwa kochwepheshe: inqubo elula futhi ingenza okukhiphayo okungasekelwe kubonakale kunegunya. Umbiko awuqinisekisi ukuthi le ndlela ithuthukisa ikhwalithi yezinqumo zobungozi, yanelisa izibopho zokuthobelana, noma ithatha indawo yokuphatha okumisiwe nezinqubo zokuhlola.

Ukubaluleka okubanzi ukuthi i-NIST kubikwa ukuthi iphatha i-AI ekhiqizayo njengethuluzi lokuhlaziya ukubusa kwe-cybersecurity ngokwayo. Lokho kuyinqubomgomo ebambekayo kanye nokuthuthukiswa komkhuba, kodwa kufanele kuqondwe njengendlela esalungiswa ebuyekezwayo. Umthombo otholakalayo usekela ukubika ngokuhamba komsebenzi okuhlongozwayo nesikhathi sokuphawula; ayisekeli izimangalo zokuthi i-NIST ivumele imodeli ethile, ibonise ukuthuthukiswa kokuvikeleka kwezinto ezibonakalayo, noma ithole ukuthi ukuhlaziywa kwe-CSF ekhiqizwe yi-AI kunokwethenjelwa ngaphandle kokugadwa komuntu.

Ongakubuka ngokulandelayo

Imibuzo ebalulekile imiklamo esheshayo yomhlahlandlela, izidingo zokuqinisekisa, ukuphathwa kwedatha eyimfihlo yokuphepha ku-inthanethi, kanye nokuthi ukushicilelwa kokugcina kuyazishintsha yini izibonelo noma izincomo. Abafundi kufanele futhi babheke ukukhishwa okuyinhloko kwe-NIST, ukuphawula komphakathi, nobufakazi mayelana nokuthi ingabe ukugeleza komsebenzi kuthuthukisa ukuhlaziya ngaphandle kokwethula iziphetho ezingasekelwe noma ubungozi bokudalula.

Okubalulekile kokuqala ukuthola ukushicilelwa kwe-NIST okuyinhloko nokuhlola inombolo yayo yedokhumenti, idethi yokushicilela, ububanzi, kanye nemiyalelo eqondile yokuphawula. Umbiko we-ExecutiveGov unikeza umnqamulajuqu wango-Oct. 15 kodwa awunikezi isihlonzi sedokhumenti eyinhloko noma isixhumanisi esiqondile se-NIST. Umthombo oyinhloko ungavumela abafundi ukuthi bahlole ukwaziswa, amafayela alingisa, ukuqagela, izexwayiso, nanoma yimiphi imikhawulo eshiwo kunokuthembela kusifinyezo sesibili.

Ababuyekezi kufanele bahlole ukuthi ingabe umhlahlandlela wokugcina udinga ukulandeleka kusuka kuwo wonke amamephu e-CSF akhiqizwa yi-AI kuye ebufakazini obuyisisekelo. Kufanele futhi babheke imiyalelo yokusingatha izingxoxo eziphikisanayo, ama-artifact angekho, izinqubomgomo eziphelelwe yisikhathi, kanye nezigaba ezingaqinisekile. Le mininingwane izonquma ukuthi ngabe ukugeleza komsebenzi kuyakusekela yini ukuhlaziya okuziphendulela noma ngokuyinhloko kukhiqiza okusalungiswa okupholishiwe okusadinga ukwakhiwa kabusha okubanzi okwenziwa ngesandla.

Izilawuli zokuphepha zokuhamba komsebenzi we-AI zidinga ukunakwa ngokukhethekile. Imibhalo yesikhathi esizayo kufanele icacise ukuthi izinhlangano zingasebenzisa abahlinzeki bangaphandle abangamamodeli, yiluphi ulwazi okufanele lususwe ngaphambi kokwaziswa, ukuthi ukwaziswa nokuphumayo kufanele kugcinwe kanjani, nokuthi ubani ongafinyelela kuzo. Kufanele futhi ibhekane nomjovo osheshayo noma okuqukethwe okunonya okushumekwe kumafayela enhlangano, njengoba amarekhodi e-cybersecurity angase aqukathe umbhalo onobutha noma odukisayo. Azikho kulezi zilawuli ezichazwe embikweni onikeziwe.

Ubufakazi obuvela ezivivinyweni ezingokoqobo bungasiza ekutholeni ukuthi ingabe umhlahlandlela wethula okungaphezu komboniso obambekayo. Ukulandelela okuwusizo kuzobandakanya ukuhlolwa okuzimele kwekhwalithi yokwenza imephu, ukungavumelani kochwepheshe, ubufakazi obugejiwe, izimangalo ezihlotshaniswa nemibono engemihle, isikhathi esidingekayo sokuqinisekisa, kanye nokusebenza kosayizi nemikhakha ehlukene yenhlangano. Umbiko wamanje ukhuluma ngezigameko zokusebenzisa okucatshangwayo kodwa akukho ukusetshenziswa okubukhoma, ibhentshimakhi, noma umphumela olinganisiwe.

Okokugcina, abafundi kufanele babukele inqubo yokubeka amazwana omphakathi kanye noshintsho ukusuka kokusalungiswa kuye ekuqondisweni kokugcina. Amazwana angase aholele i-NIST ukuthi inciphise ukusetshenziswa okunconyiwe, ingeze izivikelo, noma ibuyekeze imiyalo. Kuze kube lokho kwenzeka, izinhlangano kufanele ziphathe noma yikuphi okubalulekile kwe-CSF ekhiqizwe yi-AI njengokusalungiswa okungabuyekezwa futhi zigcine isibopho sezahlulelo eziyisisekelo zokuvikeleka ku-inthanethi. Umbiko awusunguli usuku lokugcina lokushicilela noma ubonise ukuthi i-NIST izoshicilela yini impendulo kumazwana.

Imihlahlandlela ehlobene nemibuzo