2025联合网络防御协作组织人工智能网络安全协作手册 英文版 .docxVIP

TLP:CLEAR

JCDCAICybersecurityCollaborationPlaybook

JointCyberDefenseCollaborative

CybersecurityandInfrastructureSecurityAgency

January14,2025

ThisdocumentismarkedTLP:CLEAR:Disclosureisnotlimited.FormoreinformationontheTrafficLightProtocol,see/tlp.

TLP:CLEAR

JCDCAICybersecurityCollaborationPlaybook TLP:CLEAR

TableofContents

Acknowledgements3QuestionsandFeedback5Disclaimer5Audience6Background6Purpose6KeyDefinitions7InformationSharing:ProtectionsandMechanisms8Information-SharingProtections8Information-SharingMechanisms9InformationSharingWithinJCDC9NewlyIdentifiedVulnerabilityCoordination10IncidentReporting10ProactiveInformationSharing11InformationSharingRegardinganIncidentorVulnerability12CISA’sInformationAnalysisandOperationalUse17EnhancedCoordination18CalltoAction19

AppendixA:PopulatedExampleofChecklistsforInformationHandlingRestrictionsandVoluntaryInformationSharing21

AppendixB:CaseStudiesforProactiveInformationSharingandEnhancedCoordination26

ProactiveInformationSharingExample:ClearviewAIMisconfigurationCaseStudy26

EnhancedCoordinationExample:CompromisedPyTorchDependencyChain27

AppendixC:AdditionalAvenuesforVoluntaryInformationSharing29

AppendixD:AdditionalResources32

Page2of33 TLP:CLEAR

JCDCAICybersecurityCollaborationPlaybook TLP:CLEAR

Acknowledgements

TheCybersecurityandInfrastructureSecurityAgency(CISA)1ledthedevelopmentoftheArtificialIntelligence(AI)CybersecurityCollaborationplaybookincollaborationwithfederal,international,andprivatesectorpartnersthroughtheJointCyberDefenseCollaborative(JCDC).2JCDCisapublic-privatecollaborativewithinCISAthatleveragesauthoritiesgrantedbyCongressinthe2021NationalDefenseAuthorizationAct(NDAA)tounitetheglobalcybercommunityindefenseofcyberspace.TheJCDClogoonthisdocumentsignifiesthecontributio