At the 2024 Aspen Security Forum in July, Google collaborated with other tech giants, including Microsoft, IBM, Cisco, Amazon, Intel, OpenAI, NVIDIA, and others, to form an industry-focused Coalition for Secure AI (CoSAI). Operating under the OASIS Open consortium, the coalition’s mission is to develop a security framework to address artificial intelligence’s real-time and long-term risks. Last year, Google formed the Secure AI Framework (SAIF) as a first step to bolstering AI security. For its current focus, CoSAI announced three key workstreams to guide its focus: Software Supply Chain Security for AI Systems, Preparing Defenders for a Changing Cybersecurity Landscape, and AI Security Governance.
The first initiative seeks to extend the SLSA Provenance framework to AI models, ensuring that AI software is secure from the moment it is created through its entire lifecycle. The Software Supply Chain workstream will offer guidance on managing third-party risks, evaluating provenance, and enhancing AI application security. The second part of the workstream will develop a defender’s framework to help cybersecurity professionals navigate the complex world of AI governance and develop mitigation strategies in response to emerging offensive cybersecurity threats posed by AI models. The final part of the initiative recognizes the need for specialized AI security governance by creating checklists, scorecards, and a taxonomy of controls and risks to help practitioners access, manage, and report on security surrounding their AI products.
In addition to these initiatives, CoSAI plans to collaborate with other organizations dedicated to responsible AI, including the Partnership on AI, Frontier Model Forum, and the Open Source Security Foundation.
Learn more about the Aspen Security Forum here.
Read More on Trends, Updates, and Industry Leaders
Read more on Loyalty360:
AI Adoption Presents Mixed Reactions in Customer Service
AI and Brand Devotion: A Series
Is Your Generative AI Making Things Up? 4 Ways To Keep It Honest