为AI项目设计可追溯的物料清单，提升透明度与合规性
Implementing AI Bill of Materials (AI BOM) with SPDX 3.0: A Comprehensive Guide to Creating AI and Dataset Bill of Materials
- 扩展SBOM至AI领域，涵盖算法、数据、框架与许可证信息
- 构建AI-BOM实现从数据到模型的全链条可追溯性
- 适合关注AI合规与供应链安全的研发人员与监管者
软件物料清单（SBOM）正成为保障项目软件供应链透明度与安全性的关键工具。人工智能（AI）项目面临超越传统软件安全的独特挑战，因此需要更全面的物料清单机制。本报告提出AI-BOM概念，将传统SBOM扩展为包含算法、数据采集方法、框架与库、许可信息及标准合规性的完整文档体系，为AI系统的可追溯性与治理提供系统化方案。
原文摘要 · Abstract (English)
A Software Bill of Materials (SBOM) is becoming an increasingly important tool in regulatory and technical spaces to introduce more transparency and security into a project's software supply chain. Artificial intelligence (AI) projects face unique challenges beyond the security of their software, and thus require a more expansive approach to a bill of materials. In this report, we introduce the concept of an AI-BOM, expanding on the SBOM to include the documentation of algorithms, data collection methods, frameworks and libraries, licensing information, and standard compliance.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品；中文卡片由大模型生成，请以原文为准。