Aaron Levie:AI 智能体需要“零信任”时代
Good post to start thinking through the long term safety approaches to managing intelligence in an enterprise. As agents begin to do vastly more task execution
Box CEO Aaron Levie 认为,当 AI 智能体在企业中执行的任务远超人类时,安全、治理、控制和审计将变得至关重要。他主张把前沿闭源与开源权重模型当作内部风险来对待,因为任何有能力访问关键系统的行为体都可能犯错或被攻破,AI 需要迎来安全领域的“零信任”时代。这要求对智能体的行为、可访问数据以及出错时的控制建立多层防护与可审计机制。
查看原帖https://t.co/MjwFy73LOF
正文
当前显示原文,中文全文译文尚未就绪。
Good post to start thinking through the long term safety approaches to managing intelligence in an enterprise. As agents begin to do vastly more task execution in the organization than humans, our need to secure, govern, control, and audit that work will become paramount.
You’ll have agents operating against most of your most valuable data; they’ll be making decisions that will be harder and harder to reverse engineer; we’ll need to understand the liability and accountability regimes when models make decisions for us; and we need ways of containing the blast radius of accidentally or intentionally malicious agents.
“Treating frontier closed and open weight models like insider risks is a way to build such a system. Not because they are necessarily malicious, but because any sufficiently capable actor with access to important systems can make mistakes or be compromised, and the architecture of containment and control must account for that”
In a sense, AI will need to have its “zero trust” era that security saw. And all of this leads to needing various layers of protection and auditability of what agents are doing, what data they can work with, and controls for when things go wrong. And a huge opportunity right now for those building such systems across the enterprise.