2023年AI和标准化网络安全报告.docx

《2023年AI和标准化网络安全报告.docx》由会员分享，可在线阅读，更多相关《2023年AI和标准化网络安全报告.docx（33页珍藏版）》请在第一文库网上搜索。

1、ABBREVIATIONSAbbreviationDefinitionAlArtificial IntelligenceCEN- CENELECEuropean Committee for Standardisation - European Committee for Electrotechnical StandardisationCIAConfidentiality, Integrity and AvailabilityENEuropean StandardESOEuropean Standardisation OrganisationETSIEuropean Telecommunicat

2、ions Standards InstituteGRGroup ReportICTInformation And Communications TechnologyISGIndustry Specification GroupISOInternational Organization for StandardizationITInformation TechnologyJTCJoint Technical CommitteeMLMachine LearningNISTNational Institute of Standards and TechnologyR&DResearch And De

3、velopmentSAISecurity of Artificial IntelligenceSCSubcommitteeSDOStandards-Developing OrganisationTRTechnical ReportTSTechnical SpecificationsWlWork ItemABOUT ENISAThe European Union Agency for Cybersecurity, ENISA, is the Union,s agency dedicated to achieving a high common level of cybersecurity acr

4、oss Europe. Established in 2004 and strengthened by the EU Cybersecurity Act, the European Union Agency for Cybersecurity contributes to EU cyber policy, enhances the trustworthiness of ICT products, services and processes with cybersecurity certification schemes, cooperates with Member States and E

5、U bodies, and helps Europe prepare for the cyber challenges of tomorrow. Through knowledge sharing, capacity building and awareness raising, the Agency works together with its key stakeholders to strengthen trust in the connected economy, to boost resilience of the Union,s infrastructure, and, ultim

6、ately, to keep Europe,s society and citizens digitally secure. More information about ENISA and its work can be found here:www.enisa.europa.eu.CONTACTFor contacting the authors please useteamenisa.europa.euFor media enquiries about this paper, please usepressenisa.europa.eu.AUTHORSP. Bezombes, S. Br

7、unessaux, S. CadzowEDITOR(S)ENlSA:E. MagonaraS. GorniakP. Magnabosco E. TsekmezoglouACKNOWLEDGEMENTSWe would like to thank the Joint Research Centre and the European Commission for their active contribution and comments during the drafting stage. Also, we would like to thank the ENISA Ad Hoc Expert

8、Group on Artificial Intelligence (AI) cybersecurity for the valuable feed-back and comments in validating this report.LEGAL NOTICEThis publication represents the views and interpretations of ENISA, unless stated otherwise. It does not endorse a regulatory obligation of ENISA or of ENISA bodies pursu

9、ant to the Regulation (EU) No 2019/881.ENISA has the right to alter, update or remove the publication or any of its contents. It is intended for information purposes only and it must be accessible free of charge. All references to it or its use as a whole or partially must contain ENISA as its sourc

10、e.Third-party sources are quoted as appropriate. ENISA is not responsible or liable for the content of the external sources including external websites referenced in this publication.Neither ENISA nor any person acting on its behalf is responsible for the use that might be made of the information co

11、ntained in this publication.ENISA maintains its intellectual property rights in relation to this publication.COPYRIGHT NOTICE European Union Agency for Cybersecurity (ENISA), 2023This publication is licenced under CC-BY 4.0 Unless otherwise noted, the reuse of this document is authorised under the C

12、reative Commons Attribution 4.0 International (CO BY 4.0) licence https:/creativecommons.org/licenses/by/4.0/). This means that reuse is allowed, provided that appropriate credit is given and any changes are indicated,Cover image .For any use or reproduction of photos or other material that is not u

13、nder the ENISA copyright, permission must be sought directly from the copyright holders.ISBN 978-92-9204-616-3, DOI 10.2824/277479, TP-03-23-011-EN-CTABLE OF CONTENTS1. INTRODUCTION81.1 DOCUMENT PURPOSE AND OBJECTIVES81.2 TARGET AUDIENCE AND PREREQUISITES81.3 STRUCTURE OF THE STUDY82. SCOPE OF THE R

14、EPORT: DEFINITION OF Al AND CYBERSECURITY OF Al 92.1 ARTIFICIAL INTELLIGENCE92.2 CYBERSECURITY OF Al103. STANDARDISATION IN SUPPORT OF CYBERSECURITY OF Al123.1 RELEVANT ACTIVITIES BY THE MAIN STANDARDS-DEVELOPING ORGANISATIONS123.1.1 CEN-CENELEC123.1.2 ETSI133.1.3 ISO-IEC143.1.4 Others144. ANALYSIS

15、OF COVERAGE164.1 STANDARDISATION IN SUPPORT OF CYBERSECURITY OF Al- NARROW SENSE164.2 STANDARDISATION IN SUPPORT OF THE CYBERSECURITY OF Al- TRUSTWORTHINESS194.3 CYBERSECURITY AND STANDARDISATION IN THE CONTEXT OF THE DRAFT Al ACT215. CONCLUSIONS245.1 WRAP-UP245.2 RECOMMENDATIONS255.2.1 Recommendations to all organisations255.2.2 Recommendations to standards-developing organisations255.2.3 Recommendations in preparation for the implementation of the draft Al Act255.3 FINAL OBSERVATIONS26A ANNEX:27A.1 SELECTION OF ISO 27000 SERIES STANDARDS RELEVANT TO