[cabfpub] Specification group on Securing Artificial Intelligence

Thu Oct 3 10:25:11 UTC 2019

Hello,
I think thats relevant in context of Code-Signing Use Cases
Best regards
Arno

ETSI announce the creation of a new Industry Specification Group on 
Securing Artificial Intelligence (ISG SAI). The group will develop 
technical specifications to mitigate threats arising from the deployment 
of AI throughout multiple ICT-related industries. This includes threats 
to artificial intelligence systems from both conventional sources and 
other AIs.

The ETSI Securing Artificial Intelligence group was initiated to 
anticipate that autonomous mechanical and computing entities may make 
decisions that act against the relying parties either by design or as a 
result of malicious intent. The conventional cycle of networks risk 
analysis and countermeasure deployment represented by the 
Identify-Protect-Detect-Respond cycle needs to be re-assessed when an 
autonomous machine is involved.

The intent of the ISG SAI is therefore to address 3 aspects of 
artificial intelligence in the standards domain:

  *      Securing AI from attack e.g. where AI is a component in the
    system that needs defending
  *      Mitigating against AI e.g. where AI is the ‘problem’ or is used
    to improve and enhance other more conventional attack vectors
  *      Using AI to enhance security measures against attack from other
    things e.g. AI is part of the ‘solution’ or is used to improve and
    enhance more conventional countermeasures.

The purpose of the ETSI ISG SAI is to develop the technical knowledge 
that acts as a baseline in ensuring that artificial intelligence is 
secure. Stakeholders impacted by the activity of ETSI’s group include 
end users, manufacturers, operators and governments.

Three main activities will be undertaken and confirmed during the first 
meeting of the group.
*AI Threat Ontology *Currently, there is no common understanding of what 
constitutes an attack on AI and how it might be created, hosted and 
propagated. The work to be undertaken here will seek to define what 
would be considered an AI threat and how it might differ from threats to 
traditional systems.

Hence, the AI Threat Ontology specification seeks to align terminology 
across the different stakeholders and multiple industries. ETSI 
specifications will define what is meant by these terms in the context 
of cyber and physical security and with a narrative that should be 
readily accessible to all. This threat ontology will address AI as 
system, attacker and defence.
*Securing AI Problem Statement *This specification will be modelled on 
the ETSI GS NFV-SEC 001 “Security Problem Statement” which has been 
highly influential in guiding the scope of ETSI NFV and enabling 
“security by design” for NFV infrastructures. It will define and 
prioritize potential AI threats along with recommended actions. The 
recommendations contained in this specification will be used to define 
the scope and timescales for the follow-up work.
*Data Supply Chain Report *Data is a critical component in the 
development of AI systems, both raw data, and information and feedback 
from other AI systems and humans in the loop. However, access to 
suitable data is often limited, causing a need to resort to less 
suitable sources of data. Compromising the integrity of data has been 
demonstrated to be a viable attack vector against an AI system.

This report will summarize the methods currently used to source data for 
training AI, along with a review of existing initiatives for developing 
data sharing protocols and analyse requirements for standards for 
ensuring integrity in the shared data, information and feedback, as well 
as the confidentiality of these.
The founding members of the new ETSI group include BT, Cadzow 
Communications, Huawei Technologies, NCSC and Telefónica.
The first meeting of ISG SAI will be held in Sophia Antipolis on 23 
October. Come and join to shape the future path for secure artificial 
intelligence!

*Contact
*Claire Boyer
Mob: +33 (0)6 87 60 84 40

Email: claire.boyer at etsi.org <mailto:claire.boyer at etsi.org>

-------- Weitergeleitete Nachricht --------
Betreff: 	[ISG_SAI] Press release: ETSI launches specification group on 
Securing Artificial Intelligence
Datum: 	Wed, 2 Oct 2019 08:47:01 +0000
Von: 	Sonia Compans <Sonia.Compans at ETSI.ORG>
Antwort an: 	ISG_SAI Securing Artificial Intelligence 
<ISG_SAI at LIST.ETSI.ORG>
An: 	ISG_SAI at LIST.ETSI.ORG

Dear SAI,

We launched the press release announcing the ISG creation.

Do not hesitate to forward

https://www.etsi.org/newsroom/press-releases/1650-2019-10-etsi-launches-specification-group-on-securing-artificial-intelligence

Sonia

*Sonia Compans****–*Technical Officer

*ETSI*● www.etsi.org <http://www.etsi.org/> ●_sonia.compans at etsi.org 
<mailto:sonia.compans at etsi.org>_

Phone: +33 (0)4 92 94 43 36 ●Mobile: +33 (0)6 67 15 58 49

Watch the new ETSI video _Cybersecurity: join the players 
<https://youtu.be/H7pTWOVX0dg>_

** <https://youtu.be/H7pTWOVX0dg>**

This email may contain confidential information and is intended for the 
use of the addressee only. Any unauthorized use may be unlawful. If you 
receive this email by mistake, please advise the sender immediately by 
using the reply facility in your email software. Thank you for your 
co-operation.**

------------------------------------------------------------------------

To unsubscribe from the ISG_SAI list, click the following link:
http://list.etsi.org/scripts/wa.exe?SUBED1=ISG_SAI&A=1 
<http://list.etsi.org/script-disableds/wa.exe?SUBED1=ISG_SAI&A=1>

-- 
Arno Fiedler
Nimbus Technologieberatung GmbH
Reichensteiner Weg 17
14195 Berlin
Mobil:      0049-(0)172-3053272
Fax:        0049-(0)30-89745-777
E-Mail:     arno.fiedler at nimbus.berlin
Web:        www.nimbus.berlin
Geschäftsführer:  Arno Fiedler
USt-IdNr. :       DE 25 60 65 570
D-U-N-S® Nr.      31-25-95807
HandelsregisterNr:HRB 109409 B

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/public/attachments/20191003/60a33aff/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 5580 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/public/attachments/20191003/60a33aff/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: arno_fiedler.vcf
Type: text/x-vcard
Size: 302 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/public/attachments/20191003/60a33aff/attachment-0001.vcf>