ANSSI recommends isolating each phase of the generative AI system lifecycle (training, deployment, production) using network segmentation, dedicated hardware, and strict access controls to prevent data leakage and unauthorized access. Secure storage formats, robust communication protocols, and separation of model parameters from executable code are advised, along with prohibiting GPU sharing between AI and other workloads123. Regular risk analysis, security audits, and filtering of user inputs/outputs are essential to protect against attacks and leaks throughout the system’s operation.
Publication's URL
URL: https://cyber.gouv.fr/en/publications/security-recommendations-generative-ai-systemPublication's scorecard
Issuer: ANSSI
Country: FRA
Scope: Cyber
Typology: Standard
Publication's date: September 27, 2024
Category: Data Protection & AI
Sector: Cross-Sector
Rating:
Country: FRA
Scope: Cyber
Typology: Standard
Publication's date: September 27, 2024
Category: Data Protection & AI
Sector: Cross-Sector
Rating: