Anthropic 启动“网络使命”计划：携手行业巨头捍卫关键基础设施与开源软件安全

今天，我们正式启动 Anthropic 网络使命（Anthropic Cyber Mission），这是一项旨在保障所有人赖以生存的系统安全的长期承诺。「网络使命」是一项全新举措，旨在通过工具、研究和资源来支持防御者，保护其软件与系统。我们将从以下两个领域着手：

• 关键基础设施（Critical infrastructure）： 从保护电网、水务系统和交通网络背后的运行技术（Operational Technology, OT）以及保护政府系统开始。今天，我们将推出关键基础设施防御计划（Critical Infrastructure Defense Program, CIDP），为保护运行技术的防御者提供前沿模型、现场工程师支持以及威胁研究。
• 开源软件（Open-source software）： 在大多数软件所依赖的免费共享代码中查找漏洞并提出补丁建议，强化底层代码安全。今天，我们正式推出 OSS Scanner，利用我们最强大的模型为开源项目提供定期的免费安全扫描。

前沿模型可能会被滥用于利用漏洞和实施网络行动。尽管各方竭尽全力，技术的许多领域仍处于极度危险的暴露状态。国家级黑客（State-sponsored adversaries）多年来一直在多个领域的这些系统中寻找立足点，以便对其进行破坏。关键基础设施的防御者和开源社区拥有数十年的安全经验，但一直面临着严重的资源短缺，而在当前这一时刻，这种短缺进一步加剧。我们认可他们在这些领域的专业知识，并全力提供支持。我们还将拓展「网络使命」，在新的领域发布工具、研究和资源，以协助保卫全球网络安全。

作为 Project Glasswing 的一部分，合作伙伴发现了大量漏洞，但我们在充分降低网络风险方面仍有差距。虽然发现漏洞比以往任何时候都更加容易，但验证、排定优先级并修复这些发现依然困难重重。基于 Project Glasswing 的经验教训，我们启动了这些新项目来支持防御者。本周早些时候，我们将 Project Glasswing 并入了扩展后的网络验证计划（Cyber Verification Program），让更多防御者能够使用我们能力最强的模型。通过 Anthropic 网络使命，我们将部署 Anthropic 工程人才，并为守护关键基础设施和开源软件的人员提供工具与资金。

捍卫关键基础设施

电网、自来水厂、工厂和交通网络运行在设计使用寿命长达数十年的控制器、控制软件和工业网络之上。这些系统被称为“运行技术”（Operational Technology, OT），它们通常无法停机打补丁，因此已知漏洞可能会多年无法解决。保护它们是一项高度专业化的工作：设备通常是专有的，变更伴随着高风险，一次失误就可能导致整座工厂瘫痪。各种规模的运营商都依赖少数几家值得信赖的服务商来支持这项工作，由服务商告知暴露了哪些风险，以及应在运行中的系统上进行哪些修复。

今天，我们正式推出关键基础设施防御计划（Critical Infrastructure Defense Program），将前沿 Claude 模型、现场工程师以及我们的威胁研究带给这些值得信赖的服务商。该计划的创始合作伙伴包括：埃森哲（Accenture）、博思艾伦（Booz Allen）、CrowdStrike、德勤（Deloitte）、Dragos、日立（Hitachi）、Insane Cyber、Nozomi Networks、Palo Alto Networks、普华永道（PwC）和罗克韦尔自动化（Rockwell Automation）。

这些机构代表了运营商赖以保障系统安全的提供商：运营安全项目的咨询与先进技术公司、守护业务与工业网络的安全公司，以及制造设备本身并为其打补丁的制造商。

这项工作已经在进行中。目前已有数家合作伙伴正在与 Claude 合作修复漏洞，并协助客户进行同样的修复。关键基础设施在许多方面都很难防守，其中许多问题并非 AI 能直接解决，但我们相信前沿模型可以帮助在弱点被用来切断电力或污染水源之前，发现并修复它们。我们的第一步是与少数服务商合作，探索哪些策略最有效、最实用。

如果您的公司为关键基础设施构建安全产品或服务，可以在此登记您的意向。

随着 AI 的不断发展，只要以负责任的方式应用、经过严格验证，并将安全性和可靠性置于首位，它就为加强关键基础设施的网络安全提供了重要机遇。我们很高兴能贡献我们在运行技术和工业网络安全方面的专业知识，帮助开发切实可行的方法来应用 AI，从而增强整个社会日常所依赖的基础设施的韧性。

通过我们与关键基础设施机构的合作，普华永道的网络 OT 业务团队亲眼目睹了网络违规在这些环境中可能造成的严重后果。我坚信，必须在全行业范围内协同努力，以识别漏洞、降低风险并增强我们关键系统的韧性。

威胁行为者正利用 AI 以机器般的速度发现和利用漏洞。通过将 Unit 42 的威胁情报和运营专长与 Anthropic 的前沿模型相结合，我们正在帮助运营商抵御那些企图攻击和破坏基本服务的不良分子。我们正在携手为防御者提供所需的速度和精度，在安全暴露造成实质影响之前切断攻击路径。

前沿 AI 的发展速度已经超越了任何单个机构独自追踪的能力。这就是为什么“关键基础设施防御计划”至关重要。它将理解这些环境的人才与现已可用于防御的前沿能力结合在一起。我们很自豪能够贡献我们的经验，并与其他致力于保护世界所依赖系统的伙伴共同学习。

最需要保护的场所——如偏远的变电站、海上平台和处于物理隔离（air-gapped）状态的工厂——正是传统工具无法触及、专家无法驻留的地方。此前从未有人能解决工时瓶颈：需要处理的数据量超过了任何团队的处理负荷，分布的站点数量超出了任何团队的人员编制。Claude 填补了这一缺口，让我们的分析师和客户的操作人员能够将时间花在维持关键系统安全运行的重大判断上。

当供应商社区分享关于 AI 给运行环境带来的机遇与挑战的认知，而不是将这些知识封存在孤岛中时，关键基础设施及依赖它的人民将获益匪浅。加入 Anthropic 的关键基础设施防御计划，是我们使前沿 AI 与集体防御战略保持一致的途径之一，该战略立足于保障电力通畅、水源安全和交通运转的运行技术（OT）现实。

关键基础设施是网络风险转化为现实世界风险的前线。随着对手利用 AI 加快行动步伐并扩大规模，面临机器速度威胁的关键基础设施必须拥有机器速度的防御能力。通过将 CrowdStrike 深厚的安全背景和专业知识与 Anthropic 的前沿 AI 专业知识结合，我们可以为关键基础设施防御者赋予更大的优势。

在 AI 迅猛发展以及网络威胁日益复杂和快速的背景下，确保支撑社会基础设施的 OT 环境中的网络安全，已成为当今社会面临的最紧迫任务之一。通过参与该计划，我们期待与 Anthropic 及其他合作伙伴携手合作，进一步提升关键基础设施的网络韧性。

随着 AI 的加速发展，关键基础设施运营商需要能够以机器速度应对安全漏洞的解决方案。德勤正与 Anthropic 携手，帮助这些企业获得消除安全漏洞和增强韧性所需的能力，紧跟前沿 AI 的现实步伐。

运行技术是自主 AI 攻击的下一个前沿阵地。问题不再是 AI 能否影响工业流程，而是它能获得多大程度的控制权，以及速度有多快。“关键基础设施防御计划”正在汇集私营部门顶尖的创新和投资，以增强联邦与商业任务中的 OT 和 ICS（工业控制系统）韧性。

那些维持电力供应、药品安全、食品供应保障以及通信畅通的机构，面临着世界上后果最严重的网络风险。埃森哲致力于将我们深厚的 OT 安全专业知识带给守护日常关键基础设施的机构。这一合作伙伴关系将帮助把 AI 驱动的防御手段交到最需要的人手中。

6 月，我们面向美国州、地方、部落及领地政府启动了一项网络防御计划。自那时起，我们已向超过半数的美国各州以及该国部分最大的公共关键基础设施运营商提供了前沿 Claude 模型和技术支持，加快了代码扫描与修补、事件响应、红队演练以及其他安全工作流程。

我们正在倾听最了解该领域的人士的意见并向他们学习。我们的策略是与深谙此领域且深受运营商信赖的公司、联盟、政府和非营利组织合作，在最需要的地方提供支持。

保障开源软件安全

几乎所有软件都依赖开源代码，而其中大部分代码由小规模的志愿者团队维护。在 Project Glasswing 下，我们扫描了数百个广泛使用的开源项目，让人类专家对发现的许多潜在漏洞进行分流和审查，并通过我们的协调漏洞披露流程（CVD）私下向其维护者报告所发现的问题。

一些具备大规模分流能力的维护者要求我们提供模型在其项目中发现的所有内容，不论是否经过人类审查。作为回应，我们推出了 OSS Scanner，这是一款受 Google OSS-Fuzz 启发的选择性加入服务。加入该计划的项目将定期免费接受来自我们最强模型的安全扫描。每份报告都包含漏洞可被利用方式的概念验证（PoC）、解释，以及在可行情况下提供的修复建议。这些报告由模型生成，且在发送前未经人工审核。这意味着维护者可以更快地收到报告，但也意味着其中一些报告可能包含不准确之处，例如错误的严重性评级。我们预计真实阳性率（True-Positive Rate）将超过 90%，并随着时间的推移不断提高真实阳性率和修复质量。团队的发文解释了其工作原理以及如何注册加入。

该服务面向有能力跟进处理所发现问题的项目。对于其他项目，我们将继续根据 CVD 政策分享经人工验证的披露报告。

OSS Scanner 只是第一步。自此之后，我们的开源工作旨在实现以下目标：

• 更快地将发现结果交付给维护者。 将 OSS Scanner 推广到更多项目，同时为有需要的项目保留人工验证的披露渠道。
• 加速修复进程。 为有需求的项目将分流和修补流程自动化（目前主要仍靠手动）。
• 探索新型安全架构与编码实践。 针对希望超越单纯修补代码的项目，研究并分享代码加固或重写的实用方法。

我们将根据开源维护者和基金会的指导开展这项工作，并分享行之有效的经验，以便其他项目进行复现。我们为广泛使用的开源代码背后的组织提供了资助，包括 Python 软件基金会（Python Software Foundation）、通过 Linux 基金会运作的 Alpha-Omega 和 OpenSSF，以及 Apache 软件基金会（Apache Software Foundation）；同时还支持了从多个来源收集并协调漏洞报告以避免让维护者不堪重负的 Akrites 和 Gold Eagle。我们在 8 月份启动的防御者优势基金（Defender Advantage Fund, 0xDAF）支持这些领域的试点项目，并保持 OSS Scanner 的免费运作。

维护者还可以申请 Claude for Open Source 以获取免费的 Claude Max 订阅，并申请加入网络验证计划（Cyber Verification Program），获取针对防御性工作的 Claude 网络安全扩展功能访问权限。

我们为什么这样做

现在，攻击者已经可以广泛使用具备强大网络能力的 AI 模型。但是，防御工具（包括我们自己的工具）尚未惠及足够多有需要的防御者。OSS Scanner、我们的网络验证计划（Cyber Verification Program）、合作伙伴在我们平台上构建的防御性产品，以及 Claude Security 是我们在该方向上付诸的部分努力，我们将尽快补充更多支持。

我们的预测是，在两年内，AI 将有利于防御方：在漏洞发布前捕获它们、从零开始编写根本上安全的软件，以及利用模型主动防御系统，都会变得更加容易。但在短期内，情况可能并非如此。利用漏洞的成本已经大幅下降，而验证、披露和修复漏洞的过程却依然缓慢且仍然依赖人工。在 Glasswing 项目中，我们经常看到从发现漏洞到修复漏洞之间耗费数月时间。对于运行技术而言，一次修复可能必须……

Today we’re launching the Anthropic Cyber Mission, a long-term commitment to securing the systems everyone depends on. The Cyber Mission is a new effort to support defenders with tools, research, and resources to secure their software and systems. We’re starting with two areas:

• Critical infrastructure: Starting with securing the operational technology behind power grids, water systems, and transportation networks, and protecting government systems. Today, we’re introducing the Critical Infrastructure Defense Program (CIDP), which brings frontier models, on-site engineers, and threat research to the defenders that protect operational technology.
• Open-source software: Finding vulnerabilities and proposing patches in the free, shared code that most software depends on, and hardening the underlying code. Today, we’re launching OSS Scanner, which offers open-source projects regular security scans from our strongest models, for free.

Frontier models can be misused to exploit vulnerabilities and conduct cyber operations. Despite best efforts, many areas of technology remain dangerously exposed. State-sponsored adversaries have spent years gaining footholds in these systems, across many sectors, so that they can disrupt them. Defenders of critical infrastructure and the OSS community have decades of security experience but have faced severe resource shortages that are exacerbated by this moment. We are recognizing their expertise in these domains and offering our support. We will also expand the Cyber Mission to release tools, research, and resources in new areas to help secure the world.

As part of Project Glasswing, partners uncovered many vulnerabilities, but we haven’t yet achieved a sufficient reduction in cyber risk. It’s easier than ever to find vulnerabilities, but verifying, prioritizing, and fixing these findings remains challenging. Based on lessons from Project Glasswing, we’re starting these new efforts to support defenders. Earlier this week, we merged Project Glasswing into our expanded Cyber Verification Program, which gives many more defenders access to our most capable models. And through the Anthropic Cyber Mission, we’ll deploy Anthropic engineering talent and provide tools and funding for those who secure critical infrastructure and open-source software.

Defending critical infrastructure

Power grids, water utilities, factories, and transportation networks run on controllers, control software, and industrial networks built to last for decades. These systems are known as “operational technology,” and they often cannot be taken offline to patch, so known vulnerabilities can stay unresolved for years. Securing them is specialized work: the equipment is proprietary, changes are risky, and a mistake can take down a plant. Operators of every size rely on a small set of trusted providers to support that work, telling them what’s exposed and which fixes to make on a running system.

Today, we’re introducing the Critical Infrastructure Defense Program , which brings frontier Claude models, on-site engineers, and our threat research to those trusted providers. Its founding partners are Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation.

These organizations represent the providers that operators rely on to secure these systems: the consulting and advanced technology companies that run security programs, the security companies that guard the business and industrial networks, and the manufacturers that build and patch the equipment itself.

This work is underway. Several partners are currently working with Claude to fix vulnerabilities and help customers do the same. Critical infrastructure is hard to defend in many ways that AI cannot fix, but we believe that frontier models can help find and repair weaknesses before those weaknesses are used to cut off power or make water unsafe. Our first step is to work with a small cohort of providers to learn which strategies are most effective and practical.

If your company builds security products or services for critical infrastructure, you can register your interest here.

As AI continues to advance, it presents an important opportunity to strengthen cybersecurity across critical infrastructure, provided it is applied responsibly, validated rigorously, and deployed with safety and reliability at the forefront. We are pleased to contribute our operational technology and industrial cybersecurity expertise to help develop practical approaches for applying AI in ways that strengthen the resilience of the infrastructure society depends on every day.

Through our work with critical infrastructure organizations, PwC’s cyber OT practice has seen firsthand the gravity of consequences cyber breaches can have in these environments. I firmly believe that a coordinated, industry-wide effort is necessary to identify vulnerabilities, mitigate risks, and strengthen the resilience of our critical systems.

Threat actors are using AI to find and exploit exposures at machine speed. By combining Unit 42 threat intelligence and operational expertise with Anthropic’s frontier models, we’re helping operators defend against adversaries looking to attack and disrupt essential services. Together, we are giving defenders the speed and precision needed to close attack paths before exposure becomes impact.

Frontier AI is evolving faster than any single organization can track alone. That’s why the Critical Infrastructure Defense Program matters. It brings together the people who understand these environments with the frontier capabilities now available to defend them. We’re proud to contribute our experience and to learn alongside the other partners working to protect the systems the world depends on.

The sites that need protection most, like remote substations, offshore platforms, and air-gapped plants, are exactly where traditional tools can’t reach and specialists can’t be. What no one had solved was the hours: more data than any team can work through, at more sites than any team can staff. Claude closes that gap, so our analysts and our customers’ operators spend their time on the judgment calls that keep critical systems running safely.

Critical infrastructure and the people who depend on it benefit when the vendor community shares what they learn about the opportunities and challenges that AI presents to operational environments, rather than keeping that knowledge in silos. Joining Anthropic's Critical Infrastructure Defense Program is one of the ways we help align frontier AI to a collective defense strategy built around the realities of the operational technology (OT) that keeps the lights on, water safe, and transportation running.

Critical infrastructure is where cyber risk becomes real-world risk. As adversaries use AI to move faster and operate at greater scale, critical infrastructure facing machine-speed threats requires machine-speed defense. By bringing CrowdStrike’s deep security context and expertise together with Anthropic’s frontier AI expertise, we can put a greater advantage in the hands of critical infrastructure defenders.

Amid the rapid evolution of AI and the increasing sophistication and speed of cyber threats, ensuring cybersecurity in OT environments that support social infrastructure has become one of the highest priorities facing society today. Through participation in this program, we look forward to collaborating with Anthropic and fellow partners to further enhance cyber resilience for critical infrastructure.

As AI accelerates, critical infrastructure operators need solutions that address security vulnerabilities at machine speed. Together with Anthropic, Deloitte is helping provide these enterprises with the enablement needed to close security gaps and strengthen resilience, moving at pace with the realities of frontier AI.

Operational technology is the next frontier for autonomous AI-enabled attacks. The question is no longer whether AI can affect an industrial process, but how much control it can gain, and how quickly. The Critical Infrastructure Defense Program is convening the best of private-sector innovation and investment to strengthen OT and ICS resilience across federal and commercial missions.

Organizations that keep our power on, medicine safe, food supply secure, and communications running face some of the most consequential cyber risks in the world. Accenture is committed to bringing our deep OT security expertise to the organizations that protect the critical infrastructure communities depend on every day. This partnership will help put AI-powered defense in the hands of those who need it most.

In June, we launched a cyber defense program for state, local, tribal, and territorial governments. Since then, we’ve offered frontier Claude models and technical support to more than half of all US states and some of the country’s largest public critical infrastructure operators, speeding up code scanning and patching, incident response, red teaming, and other security workflows.

We are listening to and learning from the people who know this landscape best. Our approach is to work with the companies, coalitions, governments, and nonprofits that know this landscape and that operators trust, and provide support where it’s most needed.

Securing open-source software

Almost all software relies on open-source code, much of it maintained by small teams of volunteers. Under Project Glasswing, we scanned hundreds of widely used open-source projects, had humans triage and review many of the potential vulnerabilities uncovered, and privately reported what we found to their maintainers through our coordinated vulnerability disclosure process.

Some maintainers with the capacity to triage at scale asked us for everything our models had found in their project, reviewed or not. In response, we’re launching OSS Scanner, an opt-in service inspired by Google’s OSS-Fuzz. Enrolled projects receive periodic scans from our most capable models, free of charge. Each report includes a proof of concept of how the bug could be exploited, an explanation, and a suggested fix where one is available. The reports are model-generated and sent without human review. That means maintainers receive them faster, but it also means that some will contain inaccuracies, such as a wrong severity rating. We expect a true-positive rate above 90%, and will work to improve the true positive rate and fix quality over time. The team’s post explains how it works and how to enroll.

The service is meant for projects with the capacity to keep up with surfaced findings. For others, we will continue to share human-verified disclosures under our CVD policy.

OSS Scanner is a first step. From here, our open-source work aims to:

• Get findings to maintainers faster. Bring OSS Scanner to more projects while keeping human-verified disclosure for those that need it.
• Accelerate fixes. Automate triage and patching, which are still mostly manual, for projects that want it.
• Explore new secure architectures and coding practices. Research and share methods for hardening or rewriting code with projects that want to go further than patching.

We’ll do this based on guidance from open-source maintainers and foundations, and share what works so other projects can replicate it. We funded the organizations behind widely used open-source code, including the Python Software Foundation, Alpha-Omega and OpenSSF through the Linux Foundation, and the Apache Software Foundation, as well as supporting Akrites and Gold Eagle, which collect and coordinate vulnerability reports from many sources to avoid overwhelming maintainers. The Defender Advantage Fund (0xDAF), which we launched in August, supports pilot programs in these areas and keeps OSS Scanner free.

Maintainers can also apply to Claude for Open Source for free Claude Max subscriptions, and to the Cyber Verification Program for expanded access to Claude’s cyber capabilities for defensive work.

Why we're doing this

Highly cyber-capable AI models are widely available to attackers now. But defensive tools—including our own—have not yet reached enough of the defenders who need them. OSS Scanner, our Cyber Verification Program, defensive products our partners build on our platform, and Claude Security are some of our efforts here, and we’ll be adding others as soon as possible.

Our forecast is that in two years, AI will favor defense: it will be easier to catch bugs before they ship, write fundamentally secure software from scratch, and actively defend systems with models. But in the near term, that may not be true. The cost of exploiting vulnerabilities has dropped, while verifying, disclosing, and fixing them is slow and still depends on people. In Glasswing, we often saw months pass between a vulnerability being found and being fixed. With operational technology, a fix may have to wait until it can be applied safely to running machinery—in some rare cases, this might take decades.

Success means critical infrastructure such as water, power, transport, and communications keep running in the face of attacks by capable adversaries, with fewer exploitable paths in and faster recovery when something gets through. This will take years and we expect the Anthropic Cyber Mission to change as we, together with the public and private sector, learn what works.

The path ahead

Over the coming months, we’ll bring the Critical Infrastructure Defense Program to more partners and more sectors, and we’ll share what we learn along the way, including what didn’t work. We also expect other AI developers, security companies, and governments to run efforts of their own, and we’d like to collaborate with them wherever that helps defenders.

We will also expand our work to help secure open source and the broader supply chain. This includes researching new ways of writing software and new ways of defending systems. We intend to share frontier research, tools, and resources to help others secure their software and supply chain.

If you’d like to work with us:

• Companies that build security products or services for critical infrastructure, including security vendors, system integrators, and equipment manufacturers, can register their interest in the Critical Infrastructure Defense Program as we expand it.
• Core maintainers of critical open-source projects can enroll in OSS Scanner.
• Security teams of any size, including operators of critical infrastructure and open-source maintainers, can apply to our expanded Cyber Verification Program for access to our models.