Nvidia 雷厉风行：开放 AI 行业联盟成立一周，已推进 AI 安全方案

成立仅一周的开放安全 AI 联盟（Open Secure AI Alliance，OSAA）由 Nvidia 牵头，成员规模已增长至超过 120 家公司。该联盟组建了一个名称颇为讨巧的工作组——共享 AI 发现交换组织（Shared AI Findings Exchange，SAFE）。该工作组已开始公布提案并征集公开意见，而作为联盟成员之一的 Linux Foundation 正负责管理这些提案。

该组织在本周于拉斯维加斯举行的网络安全领域重要盛会 Black Hat 大会上、趁成员聚集之际制定了这些提案。

就目前而言，这些准则并没有特别颠覆性的内容。提案涵盖了如何保密报告 AI 网络安全事件、向受影响方发出警报，以及在不追究责任的前提下进行分析，以便各方都能从事件中吸取教训。

与此同时，OSAA 成员也在贡献并编目其开源技术的各类组件，这些组件可能具备实用价值。按照此类行业组织的一贯发展路径，这些资源最终或许会整合为一套开放源码方案，帮助企业保护其 AI Agent，或防御恶意 AI 攻击者，例如曾渗透 Hugging Face 的 OpenAI 模型。（Hugging Face 也是该组织成员。）

例如，Nvidia 表示其提供了完整的开放模型系列，以及名为 Garak 的开源 LLM 漏洞扫描器；Okta 正在开发 Agent 身份技术；Red Hat 正在推进 Agent 治理；Amazon 则贡献了一款开放的 Agent 构建工具 Strands Agents，以及一种授权语言 Cedar。类似案例还有很多。

该组织目前的成员包括 Adobe、BlackRock、Cisco、Intel、Microsoft 和 Visa 等众多知名企业，但也存在一些显著缺席者，例如 Anthropic、OpenAI 和 Google。

有意思的是，OpenAI 和 Google 都签署了促成该组织成立的最初公开信。这封上周发布的公开信呼吁白宫支持开源 AI 工作，而非压制它们。该信由 Nvidia 倡导，并获得了 200 多家科技公司的签署。

尽管Anthropic 至今对该公开信和行业组织态度冷淡并不令人意外，但 OpenAI 和 Google 都已经发布了各自的开放权重模型。Google 通常也被认为是开源领域的重要支持者。随着该组织持续积聚势头，它们是否会加入仍有待观察。

与此同时，该组织正以 AI 的速度行动。就在几周前，特朗普政府被曝正考虑禁止中国开放权重模型，引发了行业担忧，并最终促成了这封公开信。

无论美国最终将如何处理中国开放权重模型的问题，这个重量级组织的快速行动似乎都有利于美国开放 AI 生态系统。生态系统中的一些人士——例如美国开放权重 AI 实验室 Arcee 的联合创始人兼首席技术官——认为，这最终是应对中国 AI 实验室可能给美国带来的任何威胁——无论是真实还是臆想——的最佳方式。

“开放性可能是通往 AI 安全与保障最重要的路径之一，”该行业组织在公开信中写道。看来，它们已准备好立即以实际行动和技术投入，践行这一主张。

The week-old Open Secure AI Alliance (OSAA), an industry group spearheaded by Nvidia that has already grown to over 120 companies, has developed a cutely named working group, the Shared AI Findings Exchange, or SAFE. The group is already presenting proposals for open comment, and the Linux Foundation, a member of the group, is managing the proposals.

The group developed them while members gathered at the nexus of the cybersecurity world, the Black Hat conference, taking place this week in Las Vegas.

The guidelines are nothing terribly earth-shattering for now. The proposals cover areas like how to confidentially report AI cybersecurity incidents, alert those affected, and then do blame-free analysis so all can learn from them.

At the same time, members of the OSAA are also contributing and cataloging bits and pieces of their open source technology that might be useful. This may, as these types of industry organizations go, eventually coalesce into an open source means for an enterprise to secure their AI agents, or defend against rogue AI attackers, such as the OpenAI model that infiltrated Hugging Face. (Hugging Face is also a member of this group.)

For instance, Nvidia has noted that it offers an entire family of open models, as well as an open source LLM vulnerability scanner called Garak; Okta is working on agent identity tech; Red Hat is working on agent governance; and Amazon has contributed both an open agent building tool, Strands Agents, and an authorization language, Cedar. And there are many more examples.

The group now includes a host of big names, including Adobe, BlackRock, Cisco, Intel, Microsoft, and Visa, but there are some notable absences, like Anthropic, OpenAI, and Google.

Interestingly, both OpenAI and Google signed the original open letter that spawned this group. The letter, published last week, urged the White House to support open source AI efforts, not squash them. It was championed by Nvidia and signed by over 200 tech companies.

While Anthropic’s cold shoulder to the letter and the industry group to date is not a surprise, both OpenAI and Google have released open weight models of their own. Google is generally known as a big supporter of open source, too. We’ll see if they join as this group builds momentum.

Meanwhile, the group is operating at AI speeds. It’s only been a couple of weeks since news broke that the Trump administration was considering banning Chinese open weight models, causing the industry consternation that resulted in the open letter.

Whatever ultimately happens with Chinese open weight models in the U.S., the fast action by this heavyweight group appears to be a good thing for the U.S. open AI ecosystem. Some in the ecosystem, like the co-founder and chief technology officer of U.S. open weight AI lab Arcee, say that’s ultimately the way to best any threat — real or imagined — that Chinese AI labs pose to the United States.

“Openness may be one of the most important paths to AI safety and security,” this industry group wrote in their letter. Looks like they are ready to immediately put their effort — and their tech — where their mouths are.