用金融反洗钱思路构建生物AI安全防线,防止科研工具被滥用
Know Your Scientist: KYC as Biosecurity Infrastructure
- 借鉴金融反洗钱机制,建立三层次用户认证与监控体系
- 通过机构背书、序列比对和行为分析,提升恶意使用门槛
- 无需立法即可落地,适合生物科研机构与实验室使用
用于蛋白质设计与结构预测的生物AI工具快速发展,带来双重用途风险,现有防护措施难以应对。当前基于内容的限制(如关键词过滤、输出筛查、基于内容的访问拒绝)在生物学领域效果有限,因可靠功能预测仍不可行,新型威胁亦可规避检测。本文提出受金融反洗钱(AML)启发的三层次知情客户(KYC)框架:一级由研究机构作为信任锚点,为所属研究人员背书并承担审核责任;二级通过序列同源搜索与功能注释实施输出筛查;三级监控行为模式,识别与申报研究目的不符的异常。该分层方案在保障合法研究者访问的同时,通过机构问责与可追溯性提高滥用成本。该框架可立即利用现有机构基础设施实施,无需新立法或监管要求。
原文摘要 · Abstract (English)
Biological AI tools for protein design and structure prediction are advancing rapidly, creating dual-use risks that existing safeguards cannot adequately address. Current model-level restrictions, including keyword filtering, output screening, and content-based access denials, are fundamentally ill-suited to biology, where reliable function prediction remains beyond reach and novel threats evade detection by design. We propose a three-tier Know Your Customer (KYC) framework, inspired by anti-money laundering (AML) practices in the financial sector, that shifts governance from content inspection to user verification and monitoring. Tier I leverages research institutions as trust anchors to vouch for affiliated researchers and assume responsibility for vetting. Tier II applies output screening through sequence homology searches and functional annotation. Tier III monitors behavioral patterns to detect anomalies inconsistent with declared research purposes. This layered approach preserves access for legitimate researchers while raising the cost of misuse through institutional accountability and traceability. The framework can be implemented immediately using existing institutional infrastructure, requiring no new legislation or regulatory mandates.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。