arXiv:2602.11301cs.AIcs.CR2026-02被引 1

为复杂AI系统提供可落地的多智能体安全治理架构。

The PBSAI Governance Ecosystem: A Multi-Agent AI Reference Architecture for Securing Enterprise AI Estates

  • 构建12个责任域,用限定智能体家族实现策略与工具的协同。
  • 通过上下文包和结构化输出契约,确保跨域可追溯与人工在环。
  • 适合企业安全团队与超大规模防御系统部署参考。

企业正将大语言模型、检索增强生成流程及工具调用智能体部署于共享高性能计算集群和云加速平台,这些系统逐渐演变为涵盖模型、智能体、数据管道、安全工具、人类工作流与超大规模基础设施的综合型AI资产体系。现有治理与安全框架虽提出原则与风险功能,但缺乏针对多智能体、赋能型网络安全的可实施架构。本文提出实践者安全AI蓝图(PBSAI)治理生态系统,一种面向企业与超大规模AI资产的安全多智能体参考架构。该架构以12个责任域组织职责,并定义边界智能体家族,通过共享上下文包与结构化输出合约,在工具与政策间建立桥梁。架构假定基础企业安全能力,集成分析监控、协同防御与自适应响应等关键系统安全技术。轻量级形式模型阐明了跨域的可追溯性、出处性与人工在环保障。验证其符合NIST AI风险管理框架功能,并展示在企业安全运营中心与超大规模防御环境中的应用。PBSAI被提议作为开放生态开发与未来实证验证的证据驱动基础。

原文摘要 · Abstract (English)

Enterprises are rapidly deploying large language models, retrieval augmented generation pipelines, and tool using agents into production, often on shared high performance computing clusters and cloud accelerator platforms that also support defensive analytics. These systems increasingly function not as isolated models but as AI estates: socio technical systems spanning models, agents, data pipelines, security tooling, human workflows, and hyperscale infrastructure. Existing governance and security frameworks, including the NIST AI Risk Management Framework and systems security engineering guidance, articulate principles and risk functions but do not provide implementable architectures for multi agent, AI enabled cyber defense. This paper introduces the Practitioners Blueprint for Secure AI (PBSAI) Governance Ecosystem, a multi agent reference architecture for securing enterprise and hyperscale AI estates. PBSAI organizes responsibilities into a twelve domain taxonomy and defines bounded agent families that mediate between tools and policy through shared context envelopes and structured output contracts. The architecture assumes baseline enterprise security capabilities and encodes key systems security techniques, including analytic monitoring, coordinated defense, and adaptive response. A lightweight formal model of agents, context envelopes, and ecosystem level invariants clarifies the traceability, provenance, and human in the loop guarantees enforced across domains. We demonstrate alignment with NIST AI RMF functions and illustrate application in enterprise SOC and hyperscale defensive environments. PBSAI is proposed as a structured, evidence centric foundation for open ecosystem development and future empirical validation.

AI治理多智能体安全架构

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。