
对手无需击败人工智能系统的软件,只需打击维持系统运行的基础设施,即可中断其运作。乌克兰上周在俄罗斯境内已证明了这一点。
An adversary can interrupt an artificial intelligence system without defeating its software. It need only strike the infrastructure that keeps the system running. Ukraine proved the point inside Russia this past week.
特朗普总统及其国家安全团队应在敌人尝试在此采取同样手段之前引起警觉。10月8日,乌克兰无人机袭击迫使被称为“俄罗斯谷歌”的科技公司Yandex暂停其萨索沃数据中心的运营。次日,另一次袭击导致其卡卢加设施的多个模块瘫痪——Yandex曾称该设施为其在俄罗斯境内最强大的数据中心。10月11日,Yandex宣布,其弗拉基米尔地区数据中心在遭受无人机袭击后完全关闭。乌克兰在四天内袭击了Yandex的三座主要算力设施。
President Trump and his national security team should take note before an enemy tries the same thing here. On October 8, a Ukrainian drone attack forced Yandex, the technology company often called "Russia’s Google," to suspend operations at its Sasovo data center. The next day, another strike knocked out several modules at its Kaluga facility, which Yandex had called its most powerful data center in Russia. On October 11, the company announced that its Vladimir-region data center had shut down completely after a drone attack. Ukraine disrupted three major Yandex computing facilities in four days.
萨索沃数据中心曾托管Yandex用于训练其AI模型的三台超级计算机中的两台,其中包括YandexGPT。Yandex表示目前尚未确定设备是否能够恢复。无论最终损害评估如何,俄罗斯领先的AI开发商在一夜之间失去了一个重要的算力枢纽。
The Sasovo facility housed two of Yandex’s three supercomputers used to train its AI models, including YandexGPT. Yandex said it could not yet determine whether the equipment could be restored. Whatever the final damage assessment, Russia’s leading AI developer lost a major computing hub in a single night.
美国必须在国内和海外捍卫我们的数字基础设施,以赢得下一场战争。我在担任陆军军官和五角大楼战略家的多年里学会了,判断一种军事能力是否可靠,关键在于它是否能在需要时存在。一件在靶场上耀眼夺目的武器,若其补给线在实战中中断,就会成为负担。这一标准应适用于我们对人工智能的依赖。
AMERICA MUST DEFEND OUR DIGITAL INFRASTRUCTURE, HERE AND OVERSEAS, TO WIN THE NEXT WAR During my years as an Army officer and Pentagon strategist, I learned to judge a military capability by whether it would be there when needed. A weapon that dazzles on the test range becomes a liability when its supply line fails in combat. That standard should govern our dependence on AI.
“云”这个词掩盖了计算服务背后的物理机器。这些服务需要建筑、处理器、电力、冷却设备和通信网络。网络安全和基础设施安全局称能源和通信“对几乎所有其他关键基础设施部门的运作至关重要”。人工智能革命将在有电力的地方展开 — — 中国对此有所认识。这种脆弱性远远超出了俄罗斯。政府任务、基本服务和美国企业都依赖先进计算。
The word "cloud" hides the physical machinery behind computing services. Those services require buildings, processors, electricity, cooling equipment and communications networks. The Cybersecurity and Infrastructure Security Agency calls energy and communications "fundamental to the operation of practically every other critical infrastructure sector." THE AI REVOLUTION WILL GO WHEREVER THERE'S ELECTRICITY — AND CHINA KNOWS IT That vulnerability reaches well beyond Russia. Government missions, essential services and American businesses all run on advanced computing.
当一个私营设施支持不可或缺的国防或情报功能时,其持续可用性就成为国家安全问题。这并不意味着华盛顿应该接管这些设施。大门上的政府牌子无法阻止一架无人机。重要的是谁来保护这些场所以及他们恢复的速度。
When a privately operated facility supports an indispensable defense or intelligence function, its continued availability becomes a national security concern. That does not mean Washington should take these facilities over. A government nameplate on the gate would not stop a single drone. What matters is who defends these sites and how quickly they recover.
一次中断不必摧毁设备就能造成严重危害。在指挥官必须采取行动之后才到达的情报可能来得太晚,无法保护部队或影响决策。未能在任务截止日期前完成的恢复计划根本就不是计划。
An outage need not destroy equipment to cause serious harm. Intelligence that arrives after a commander must act may come too late to protect troops or shape the decision. A recovery plan that misses the mission’s deadline is no plan at all.
美国军事基地“装备不足”以阻止无人机群,最高指挥官在卢比奥的UAP警告之后透露。俄罗斯是一个战争地区,而美国不是。但考虑弗吉尼亚州的劳登县,该县拥有全球最高密度的数据中心,以及邻近的威廉王子县。围栏、摄像头和警卫在地面保护这些园区。这些措施无法阻止无人机,而联邦法律赋予联邦机构和经过认证的州及地方警察击落无人机的权力。乌克兰的袭击为华盛顿提供了每一个理由来测试我们的基本计算是否能够经受住来自空中的攻击。
US MILITARY BASES ARE ‘ILL-EQUIPPED’ TO STOP DRONE SWARMS, TOP COMMANDER REVEALS AFTER RUBIO'S UAP WARNING Russia is a war zone, and America is not. But consider Loudoun County, Virginia, which has the highest concentration of data centers in the world, and neighboring Prince William County. Fences, cameras and guards protect those campuses on the ground. None of that stops a drone, and federal law reserves the authority to bring one down for federal agencies and certified state and local police. Ukraine’s strikes give Washington every reason to test whether our essential computing would survive an attack from the air.
特朗普总统已经奠定了政策基础。他6月5日签署的国家安全备忘录指示各机构与有意愿的私营公司建立伙伴关系,以保障美国最先进的AI技术。备忘录具体设想了威胁情报共享、联合AI红队演练,以及为国家数据中心提供更强的物理和网络安全防护。备忘录给各机构120天时间来建立这些伙伴关系,截止日期已于10月3日届满。政府现在应报告已取得的成果:哪些伙伴关系正在运行、它们提供何种防护,以及在主要设施变得不可用后,关键任务能否继续执行。
President Trump has already laid a policy foundation. His June 5 national security memorandum directed agencies to form partnerships with willing private companies to secure America’s most advanced AI technologies. It specifically contemplated threat intelligence sharing, joint AI red-team exercises and stronger physical and cybersecurity protections for the nation’s data centers. The memorandum gave agencies 120 days to develop those partnerships, a deadline that passed on October 3. The administration should now report what it has accomplished: which partnerships are operating, what protections they provide and whether essential missions can continue after a major facility becomes unavailable.
特朗普新成立的超级智能特别工作组,于10月4日宣布成立,由国家情报总监杰伊·克莱顿牵头,是要求获得上述答案的合适场所。《路透社》10月8日报道称,副主席斯科特·库珀预计全体委员会将于本周召开会议,随后发布章程。基础设施就绪情况应纳入该章程。总统应指示采取四项切实步骤。
Trump’s new Super Intelligence Task Force, announced October 4 and led by Director of National Intelligence Jay Clayton, is the right venue to demand those answers. Reuters reported October 8 that vice chair Scott Kupor expected the full committee to convene this week and to issue a charter afterward. Infrastructure readiness belongs in that charter. The president should direct four practical steps.
第一,确定对国防、情报及其他不可或缺的政府任务至关重要的算力能力。评估失去这些能力的代价、替代方案的可用性以及恢复运行所需时间。应由任务而非设施的价格标签或规模来决定其安全优先级。
First, identify the computing capabilities essential to national defense, intelligence and other indispensable government missions. Assess the cost of losing them, the availability of alternatives and the time required to restore operations. The mission, not a facility’s price tag or size, should determine its security priority.
第二,落实责任。私营运营商必须强化其设施防护并建立冗余。保卫设施上空领空是政府的职责,因此联邦机构和地方警方应为最关键的站点规划反无人机覆盖。联邦机构还必须提供及时的威胁信息、界定其采购任务的要求并协调紧急援助。总统应指定一名单一官员,负责统筹这些工作并弥补漏洞。
Second, assign responsibility. Private operators must harden their facilities and build redundancy. Defending the airspace above them is government’s job, so federal agencies and local police should plan counter-drone coverage for the most critical sites. Federal agencies must also provide timely threat information, define requirements for the missions they purchase and coordinate emergency assistance. The president should name a single official responsible for pulling those efforts together and closing gaps.
第三,制定相称且可强制执行的安全要求。政府合同可要求为基本服务提供防护和连续性安排,国会应填补已显现的权限空白。要求应涵盖电力、制冷和通信,以及计算设备。
Third, establish proportionate, enforceable security requirements. Government contracts can require protection and continuity arrangements for essential services, and Congress should close demonstrated gaps in authority. Requirements should cover power, cooling and communications as well as computing equipment.
第四,像华盛顿地区机构长期在联邦应急管理局(FEMA)年度“鹰视野”演习等演练中测试其运作连续性计划那样,测试恢复能力。这些测试应包括失去不止一个设施,或失去共享的电力或通信供应商。另一站点能否承担工作负载?必要的数据、设备和人员是否到位?能否在任务规定的期限内恢复运作?凡答案为否者,应在危机发生前加以修正。
Fourth, test recovery the way Washington-area agencies have long exercised their continuity of operations plans in drills such as FEMA’s annual Eagle Horizon. Those tests should include the loss of more than one facility or a shared power or communications provider. Can another site accept the workload? Are the necessary data, equipment and personnel available? Can operations resume within the mission’s deadline? Where the answer is no, fix it before a crisis.
国会应收到关于这些结果的机密报告。公开摘要可在不泄露敏感设施或防御措施的前提下确立问责。
Congress should receive classified reports on those results. A public summary can establish accountability without revealing sensitive facilities or defensive measures.
民用核工业提供了一个有益的先例。核管理委员会(NRC)要求核电站配备武装安保人员、物理屏障和入侵探测系统,并通过实兵对抗演练测试这些防御措施。其中大多数电站为私有。
The civilian nuclear industry offers a useful precedent. The Nuclear Regulatory Commission requires nuclear power plants to maintain armed security officers, physical barriers and intrusion detection, and it tests those defenses with force-on-force exercises. Most of those plants are privately owned.
人工智能数据中心带来的风险不同,华盛顿不应照搬核电站规则。但其中的原则依然适用:私有制与可强制执行的联邦安全义务可以共存。
AI data centers pose different hazards, and Washington should not copy nuclear rules wholesale. The principle carries over: private ownership and enforceable federal security obligations can coexist.
美国应保护推动技术进步的创业精神,同时要求为基本国家任务提供可靠服务。有针对性的防护措施可兼得二者。
America should preserve the entrepreneurship that drives technological progress while requiring dependable service for essential national missions. Targeted protections can deliver both.
更大的危险在于太平洋。在任何与中国的冲突中,美国都需要能在首轮打击中幸存的算力。华盛顿应识别对手将如何试图摧毁这一能力,并要求在演练中得到验证的防御和恢复计划。
The larger danger lies in the Pacific. In any conflict with China, America will need computing power that survives the first blow. Washington should identify how an adversary would try to knock that capacity out and require defenses and recovery plans proven in exercises.
乌克兰的打击是一记警告枪声。特朗普总统应要求对其引发的问题给出一个经过验证的答案:当一个关键的美国人工智能设施瘫痪时,我们的基本任务能否继续?
Ukraine’s strikes are a warning shot. President Trump should demand a tested answer to the question they raise: When a critical American AI facility goes down, can our essential missions continue?