布鲁塞尔 — 根据POLITICO获得的一份文件，欧洲委员会网络安全部门正在推出一项计划，利用人工智能应对高风险网络攻击。
BRUSSELS — The European Commission's cybersecurity division is rolling out a plan to use artificial intelligence to respond to high-risk cyberattacks, according to a document obtained by POLITICO.
这份未注日期的文件由委员会信息技术部门撰写，阐述了如何为欧盟执行机构的网络防御做好准备，以应对“新兴的人工智能驱动威胁”。文件提出了一项行动计划，以在人工智能背景下加强防御，其中最紧迫的举措是提高对攻击的响应速度。
The undated document, written by the Commission's IT department, sets out how to prepare the EU executive’s cyber defenses for “emerging AI-driven threats.”It proposes an action plan to shore up defenses in light of AI, with the most urgent move being the speed of response to attacks.
各国政府一直在努力应对人工智能带来的日益增长的威胁，这种威胁源于人工智能能够暴露和利用网络安全漏洞。像OpenAI意外入侵Hugging Face这样的事件引发了呼吁，包括在最高政治层面，要求更加警惕先进的人工智能模型。
Governments have rushed to grapple with the rising threat brought by AI's ability to expose and exploit cybersecurity vulnerabilities. Incidents like OpenAI's accidental intrusion into Hugging Face have prompted calls, including at the highest political level, to be more wary of advanced AI models.
欧盟执行机构内部的网络防御人员警告称，在“高风险场景”中，快速响应网络攻击至关重要，他们表示，如果不能及时采取遏制措施，仅仅能够检测到攻击“是不够的”。该文件称，委员会内部信息技术部门DG DIGIT的官员们正计划在特定高风险场景中使用自动化的“防护措施”。文件中这些场景被删除了，该文件是在回应一份信息自由请求时提供给POLITICO的。
Being able to respond quickly to cyberattacks is most crucial in “high-risk scenarios,” the EU executive’s internal cyber defenders warned, saying that the ability to detect an attack is “not sufficient if containment measures cannot be taken quickly enough.”Officials at the in-house IT department, DG DIGIT, are planning to use automated “protective measures” in specific high-risk scenarios, it said. Those scenarios were redacted in the document, which was provided to POLITICO in response to a freedom of information request.
根据文件所述，该计划并不构成“无控制的自动化”，并且将有严格的控制措施到位，包括人工监督。
The plan does not amount to “uncontrolled automation” and there will be strict controls in place including human oversight, according to the document.
除了阐述响应计划外，该文件还阐述了委员会在人工智能方面面临的网络安全挑战。
As well as laying out the response plan, the document sets out the cybersecurity challenges the Commission faces from AI.
文件称，最先进的人工智能模型预计将“显著提高网络攻击的速度、规模和适应性”，因此委员会必须在一个“攻击可能变得更快、更频繁且更具可扩展性”的环境中做好防御准备。
The most advanced AI models are expected to “significantly increase the speed, scale and adaptability of cyberattacks” and the Commission must therefore have defenses in places for an environment where “attacks are likely to become faster, more frequent and more scalable,” it said.
他们指出，潜在风险包括“恶意活动发生在欧盟委员会正常工作时间之外，进而在各系统中迅速扩散，导致大量数据被窃取或业务运行受到干扰，而此时欧盟委员会尚无法及时采取人工干预措施”。
Risks include situations where “malicious activity occurs outside EC [European Commission] normal working hours, spreads more rapidly across systems, or results in large-scale exfiltration or operational disruption before manual intervention can be organized by EC,” they said.
据称，欧盟委员会的网络安全部门已向内部申请批准以推进相关计划，但目前尚不清楚这些计划是否已经付诸实施。欧盟委员会未对置评请求作出回应。
The Commission's cyber division has sought approval internally to move ahead with the plans, it said, though it’s not clear whether the plans have yet been put in place. The Commission didn't respond to a request for comment.