安全開發實務
AI 安全與風險管理
Angeline Corvaglia
Founder and Digital Transformation Expert
因應 AI 的獨特弱點
Data provenance and traceability
- 資料來源：資料的出處
- 可追溯性：追蹤其流轉
安全性助益
- 資料投毒攻擊
- 資料遭竄改
Validation and sanitation
- Checking data
- Cleaning data
Helps ensure data is:
- accurate
- relevant
- free from any malicious tampering
Data minimization
- Limiting the amount of data collected and processed
- Only what is absolutely necessary
Helps reduce the risk of:
- privacy breaches
- data theft
Encryption and anonymization
- Encryption: Transforms sensitive data into a secure format
- Anonymization: Remove personally identifiable information
How they help security:
- Attacks aimed at extracting sensitive information
Secure coding practices
- Reduce vulnerabilities within the code base
- Regular code reviews
- Vulnerability scanning
- Adhering to coding standards
How it helps security
- Infrastructure attacks
Access controls
- Limiting who can interact
- Trusted, verified individuals or entities
How it helps security
- External attacks exploiting vulnerabilities
Secure infrastructure
- Safeguard both hardware and software
- Firewalls
- Intrusion detection systems
- Secure cloud services
How it helps security
- Infrastructure-targeted threats
Security isn't for the tech team alone
Combined effort ensures that the AI systems are secure, trusted, and reliable.
