为自主智能系统设计多层安全框架,防范其自行动作带来的风险。
Securing Agentic AI Systems -- A Multilayer Security Framework
- 基于生命周期视角构建多层防御体系
- 提出AI-CIAA安全模型保障机密性与可审计性
- 适合企业安全团队落地部署,提供操作指南
自主型人工智能系统因其自主决策与环境适应能力,在网络安全、金融、医疗等关键领域广泛应用。然而,其自主行为也带来了未经授权操作、对抗性攻击和动态交互等独特安全挑战。现有安全框架难以有效应对这些特性。本文采用设计科学方法,提出MAAIS框架及针对自主AI的CIAA(保密性、完整性、可用性、可问责性)安全概念,通过多层防御机制保障系统全生命周期的安全。框架通过与MITRE ATLAS对抗威胁图谱映射进行验证,为企业的安全官、AI平台与工程团队提供结构化、标准化的部署与治理方案,支持对自主智能工作负载的系统性保护。
原文摘要 · Abstract (English)
Securing Agentic Artificial Intelligence (AI) systems requires addressing the complex cyber risks introduced by autonomous, decision-making, and adaptive behaviors. Agentic AI systems are increasingly deployed across industries, organizations, and critical sectors such as cybersecurity, finance, and healthcare. However, their autonomy introduces unique security challenges, including unauthorized actions, adversarial manipulation, and dynamic environmental interactions. Existing AI security frameworks do not adequately address these challenges or the unique nuances of agentic AI. This research develops a lifecycle-aware security framework specifically designed for agentic AI systems using the Design Science Research (DSR) methodology. The paper introduces MAAIS, an agentic security framework, and the agentic AI CIAA (Confidentiality, Integrity, Availability, and Accountability) concept. MAAIS integrates multiple defense layers to maintain CIAA across the AI lifecycle. Framework validation is conducted by mapping with the established MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) AI tactics. The study contributes a structured, standardized, and framework-based approach for the secure deployment and governance of agentic AI in enterprise environments. This framework is intended for enterprise CISOs, security, AI platform, and engineering teams and offers a detailed step-by-step approach to securing agentic AI workloads.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。