2025联合网络防御协作组织人工智能网络安全协作手册（英文版）.docx

TLP:CLEAR

TLP:CLEAR

TLP:CLEAR

TLP:CLEAR

JCDCAICybersecurityCollaborationPlaybook

JointCyberDefenseCollaborative

CybersecurityandInfrastructureSecurityAgency

January14,2025

ThisdocumentismarkedTLP:CLEAR:Disclosureisnotlimited.FormoreinformationontheTrafficLightProtocol,see/tlp.

JCDCAICybersecurityCollaboration

JCDCAICybersecurityCollaborationPlaybookTLP:CLEAR

Page

Page2of33

TLP:CLEAR

TLP:CLEAR

TableofContents

Acknowledgements 3

QuestionsandFeedback 5

Disclaimer 5

Audience 6

Background 6

Purpose 6

KeyDefinitions 7

InformationSharing:ProtectionsandMechanisms 8

Information-SharingProtections 8

Information-SharingMechanisms 9

InformationSharingWithinJCDC 9

NewlyIdentifiedVulnerabilityCoordination 10

IncidentReporting 10

ProactiveInformationSharing 11

InformationSharingRegardinganIncidentorVulnerability 12

CISA’sInformationAnalysisandOperationalUse 17

EnhancedCoordination 18

CalltoAction 19

AppendixA:PopulatedExampleofChecklistsforInformationHandlingRestrictionsandVoluntary

InformationSharing 21

AppendixB:CaseStudiesforProactiveInformationSharingandEnhancedCoordination 26

ProactiveInformationSharingExample:ClearviewAIMisconfigurationCaseStudy 26

EnhancedCoordinationExample:CompromisedPyTorchDependencyChain 27

AppendixC:AdditionalAvenuesforVoluntaryInformationSharing 29

AppendixD:AdditionalResources 32

Page3

Page3of33

TLP:CLEAR

TLP:CLEAR

Acknowledgements

TheCybersecurityandInfrastructureSecurityAgency(CISA)1ledthedevelopmentoftheArtificialIntelligence(AI)CybersecurityCollaborationplaybookincollaborationwithfederal,international,andprivatesectorpartnersthroughtheJointCyberDefenseCollaborative(JCDC).2JCDCisa

public-privatecollaborativewithinCISAthatleveragesauthoritiesgrantedby