[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"article-nvidia-open-ai-security-alliance-partners-zh":3,"article-related-nvidia-open-ai-security-alliance-partners-zh":30,"series-industry-522d7bc1-3349-41a8-ae2c-6d7ef7e3b843":75},{"id":4,"slug":5,"title":6,"content":7,"summary":8,"source":9,"source_url":10,"author":11,"image_url":12,"cover_image":12,"category":13,"language":14,"translated_content":11,"related_article_id":15,"keywords":16,"key_takeaways":23,"views":27,"created_at":28,"published_at":29,"topic_cluster_id":11},"522d7bc1-3349-41a8-ae2c-6d7ef7e3b843","nvidia-open-ai-security-alliance-partners-zh","Nvidia 牽頭 AI 安全聯盟","\u003Cp data-speakable=\"summary\">\u003Ca href=\"\u002Ftag\u002Fnvidia\">Nvidia\u003C\u002Fa> 牽頭成立 \u003Ca href=\"\u002Fnews\u002Fopenai-newsroom-announcements-digest-zh\">Open\u003C\u002Fa> Secure AI Alliance，想用開放工具強化 \u003Ca href=\"\u002Ftag\u002Fai-agent\">AI agent\u003C\u002Fa> 的\u003Ca href=\"\u002Fnews\u002Fpac-man-humanoid-dodgeball-safety-zh\">安全\u003C\u002Fa>防護。\u003C\u002Fp>\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.nvidia.com\u002F\" target=\"_blank\" rel=\"noopener\">Nvidia\u003C\u002Fa> 在 7 月 27 日宣布這個聯盟。創始夥伴超過 20 家。名單裡有 \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002F\" target=\"_blank\" rel=\"noopener\">Microsoft\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fwww.ibm.com\u002F\" target=\"_blank\" rel=\"noopener\">IBM\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fwww.dell.com\u002F\" target=\"_blank\" rel=\"noopener\">Dell Technologies\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fwww.redhat.com\u002F\" target=\"_blank\" rel=\"noopener\">Red Hat\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fwww.crowdstrike.com\u002F\" target=\"_blank\" rel=\"noopener\">CrowdStrike\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fwww.paloaltonetworks.com\u002F\" target=\"_blank\" rel=\"noopener\">Palo Alto Networks\u003C\u002Fa>，還有 \u003Ca href=\"https:\u002F\u002Fwww.cloudflare.com\u002F\" target=\"_blank\" rel=\"noopener\">Cloudflare\u003C\u002Fa>。這組名單很像企業 IT 的縮影。\u003C\u002Fp>\u003Cp>AI \u003Ca href=\"\u002Ftag\u002Fagent\">agent\u003C\u002Fa> 早就不是玩具。它們會讀資料、呼叫 API、寫入系統。這代表風險也跟著變複雜。只管模型準不準，已經不夠了。現在還要管它能不能亂碰檔案、亂發指令、亂拿權限。\u003C\u002Fp>\u003Ctable>\u003Cthead>\u003Ctr>\u003Cth>項目\u003C\u002Fth>\u003Cth>內容\u003C\u002Fth>\u003C\u002Ftr>\u003C\u002Fthead>\u003Ctbody>\u003Ctr>\u003Ctd>宣布日期\u003C\u002Ftd>\u003Ctd>7 月 27 日\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd>創始夥伴數量\u003C\u002Ftd>\u003Ctd>20 家以上\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd>主要創始夥伴\u003C\u002Ftd>\u003Ctd>Microsoft、IBM、Dell、Red Hat、CrowdStrike、Palo Alto Networks、Cloudflare\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd>未列入創始名單\u003C\u002Ftd>\u003Ctd>OpenAI、Google、Anthropic\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\u003Ch2>這個聯盟為什麼現在才出現\u003C\u002Fh2>\u003Cp>AI 安全的問題，最近一年變得很實際。以前很多團隊只要鎖 API key，限制輸出，再加上基本審查，就覺得夠了。AI agent 出現後，這套做法開始漏水。因為 agent 會連續做事，不只回答問題。\u003C\u002Fp>\n\u003Cfigure class=\"my-6\">\u003Cimg src=\"https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1785486780858-e4b3.png\" alt=\"Nvidia 牽頭 AI 安全聯盟\" class=\"rounded-xl w-full\" loading=\"lazy\" \u002F>\u003C\u002Ffigure>\n\u003Cp>\u003Ca href=\"\u002Fnews\u002Fretoken-one-token-visual-retrieval-zh\">一個\u003C\u002Fa> agent 可能先看郵件，再查資料庫，接著觸發工作流程。每一步都可能出事。提示注入、資料外洩、權限濫用，會同時發生。這讓安全團隊很難只靠傳統邊界防護。\u003C\u002Fp>\u003Cp>Nvidia 的想法很直接。企業不想每換一次模型，就重寫一次安全規則。大家要的是共通的政策、記錄、評估和事件處理方式。開放工具比較容易讓不同廠商對齊，也比較好落地。\u003C\u002Fp>\u003Cul>\u003Cli>AI agent 會跨系統動作，攻擊面直接變大。\u003C\u002Fli>\u003Cli>安全團隊需要共通的存取、稽核、回應機制。\u003C\u002Fli>\u003Cli>開放標準能降低企業切換模型的成本。\u003C\u002Fli>\u003Cli>企業更想要可審計的控制層，不想只看模型宣傳。\u003C\u002Fli>\u003C\u002Ful>\u003Ch2>Hugging Face 事件把氣氛拉緊\u003C\u002Fh2>\u003Cp>這次宣布，剛好碰上 \u003Ca href=\"https:\u002F\u002Fhuggingface.co\u002F\" target=\"_blank\" rel=\"noopener\">Hugging Face\u003C\u002Fa> 相關的資安事件。當防守方需要支援時，若封閉系統無法及時配合，開放模型的價值就會被放大。這種情境很現實，也很難用行銷話術帶過。\u003C\u002Fp>\u003Cp>我覺得這裡最有意思的地方，是安全工作本來就很吃可檢查性。模型再強，如果團隊不能看行為、不能快改工具、不能自己驗證，出了事就很被動。開放權重或開放原始碼，不會解決全部問題，但至少讓協作快一點。\u003C\u002Fp>\u003Cp>這也是為什麼夥伴名單比標語重要。\u003Ca href=\"https:\u002F\u002Fwww.databricks.com\u002F\" target=\"_blank\" rel=\"noopener\">Databricks\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fgithub.com\u002F\" target=\"_blank\" rel=\"noopener\">GitHub\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fwww.linuxfoundation.org\u002F\" target=\"_blank\" rel=\"noopener\">Linux Foundation\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fwww.salesforce.com\u002F\" target=\"_blank\" rel=\"noopener\">Salesforce\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fwww.sap.com\u002F\" target=\"_blank\" rel=\"noopener\">SAP\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fwww.servicenow.com\u002F\" target=\"_blank\" rel=\"noopener\">ServiceNow\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fwww.siemens.com\u002F\" target=\"_blank\" rel=\"noopener\">Siemens\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fwww.snowflake.com\u002F\" target=\"_blank\" rel=\"noopener\">Snowflake\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fwww.zscaler.com\u002F\" target=\"_blank\" rel=\"noopener\">Zscaler\u003C\u002Fa>，都帶著企業導入經驗。\u003C\u002Fp>\u003Cblockquote>“Open-source software is the most important technology for the future of software.” — Mark Zuckerberg\u003C\u002Fblockquote>\u003Ch2>名單透露了市場怎麼站隊\u003C\u002Fh2>\u003Cp>這份聯盟名單，像是\u003Ca href=\"\u002Ftag\u002F企業-ai\">企業 AI\u003C\u002Fa> 安全市場的地圖。上面的人，不是隨便掛名的品牌。它們多半已經卡在雲端、端點防護、開發流程、資料平台，或企業採購裡。\u003C\u002Fp>\n\u003Cfigure class=\"my-6\">\u003Cimg src=\"https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1785486774128-64on.png\" alt=\"Nvidia 牽頭 AI 安全聯盟\" class=\"rounded-xl w-full\" loading=\"lazy\" \u002F>\u003C\u002Ffigure>\n\u003Cp>這件事很重要。因為企業買安全工具，通常不是從零開始。它們會沿用既有供應商。若一套 AI 安全框架，同時得到雲端、開發、資安、基礎架構廠商支持，進採購流程會順很多。\u003C\u002Fp>\u003Cp>這裡也能看出開放與封閉生態的分工。\u003Ca href=\"https:\u002F\u002Fopenai.com\u002F\" target=\"_blank\" rel=\"noopener\">OpenAI\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fdeepmind.google\u002F\" target=\"_blank\" rel=\"noopener\">Google\u003C\u002Fa>、\u003Ca href=\"https:\u002F\u002Fwww.anthropic.com\u002F\" target=\"_blank\" rel=\"noopener\">Anthropic\u003C\u002Fa> 主攻模型與託管服務。Nvidia 則在安全層面出手，拉的是偏開放、偏企業基礎設施的陣營。\u003C\u002Fp>\u003Cul>\u003Cli>企業採購很吃既有關係，安全工具也是。\u003C\u002Fli>\u003Cli>雲端與資安廠商一起站台，標準比較容易擴散。\u003C\u002Fli>\u003Cli>開放系統在互通性高的場景，通常更好談落地。\u003C\u002Fli>\u003Cli>封閉模型若沒有外部稽核接口，進企業常會卡關。\u003C\u002Fli>\u003C\u002Ful>\u003Ch2>台灣開發團隊該怎麼看\u003C\u002Fh2>\u003Cp>如果你在做 agent、RAG，或任何會碰內部資料的 LLM 應用，這件事其實跟你很近。很多團隊現在還把安全當附加功能，先做出來再補。這種做法在 demo 階段可以，進正式環境就很危險。\u003C\u002Fp>\u003Cp>比較實際的做法，是一開始就把權限、記錄、審計、回滾列進設計。尤其是會呼叫 API 的 agent，最好先定義它能碰哪些資料、能做哪些動作、失敗時怎麼停。這些規則越早寫，後面越少補洞。\u003C\u002Fp>\u003Cp>對台灣開發者來說，這波聯盟的意義很簡單。未來企業採購 AI 工具時，安全性會比模型分數更常被問。你如果能回答資料怎麼流、Token 怎麼記、誰能下指令、異常怎麼追，案子就比較容易過。\u003C\u002Fp>\u003Ch2>接下來要看什麼\u003C\u002Fh2>\u003Cp>真正有用的，不是聯盟名字，而是它會不會交付工具。像是參考架構、共享 \u003Ca href=\"\u002Ftag\u002Fbenchmark\">benchmark\u003C\u002Fa>、政策格式、事件回應流程，這些才是安全團隊會拿來用的東西。只要有這些，聯盟就不只是新聞稿。\u003C\u002Fp>\u003Cp>如果後面只剩口號，這個聯盟很快會被忘掉。可是一旦它真的讓不同廠商用同一套語言談 AI agent 安全，企業端就會開始跟著調整。那時候，模型選擇的標準也會變。大家會先問能不能審計，再問準不準。\u003C\u002Fp>\u003Cp>我自己的判斷很直白。接下來 6 到 12 個月，AI agent 安全會從加分項變成必選項。團隊現在就該整理權限清單、日誌格式、風險情境，別等出事才補。這種東西沒有浪漫可言，只有好不好查。\u003C\u002Fp>","Nvidia 牽頭成立 Open Secure AI Alliance，拉攏 20 多家夥伴，想用開放工具強化 AI agent 安全；OpenAI、Google、Anthropic 沒列入創始名單。","zhuanlan.zhihu.com","https:\u002F\u002Fzhuanlan.zhihu.com\u002Fp\u002F2065716073278788143",null,"https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1785486780858-e4b3.png","industry","zh","220608f2-651a-4c36-bf7c-6117bdbeabf8",[17,18,19,20,21,22],"Nvidia","AI agent 安全","Open Secure AI Alliance","企業資安","開放原始碼","LLM 安全",[24,25,26],"Nvidia 牽頭的聯盟，主打用開放工具處理 AI agent 安全。","創始名單偏向企業 IT 與資安供應商，OpenAI、Google、Anthropic 沒列入。","對開發團隊來說，權限、稽核、記錄與事件回應會比模型分數更重要。",0,"2026-07-31T08:32:30.687219+00:00","2026-07-31T08:32:30.674+00:00",{"tags":31,"relatedLang":34,"relatedPosts":38},[32],{"name":17,"slug":33},"nvidia",{"id":15,"slug":35,"title":36,"language":37},"nvidia-open-ai-security-alliance-partners-en","Nvidia backs open AI security alliance with 20+ partners","en",[39,45,51,57,63,69],{"id":40,"slug":41,"title":42,"cover_image":43,"image_url":43,"created_at":44,"category":13},"f71bb1e1-1ba8-40f5-8769-63e218a14caa","kimi-k3-pushes-open-weight-ai-default-zh","Kimi K3 把開放權重變預設","https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1785422004101-o2l3.png","2026-07-30T14:32:56.994914+00:00",{"id":46,"slug":47,"title":48,"cover_image":49,"image_url":49,"created_at":50,"category":13},"2f84c385-b870-4ef8-90ee-f8b1c545392c","anthropic-open-model-fight-lonely-ai-stance-zh","Anthropic 對開放模型的孤立姿態","https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1785414769795-ommd.png","2026-07-30T12:32:24.061158+00:00",{"id":52,"slug":53,"title":54,"cover_image":55,"image_url":55,"created_at":56,"category":13},"06ecd48d-e824-4918-9b91-1aa6cb7e9ddf","immich-docker-compose-setup-common-errors-zh","Immich Docker Compose 5 個常見錯誤修正","https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1785403975315-zugi.png","2026-07-30T09:32:28.534813+00:00",{"id":58,"slug":59,"title":60,"cover_image":61,"image_url":61,"created_at":62,"category":13},"54073d4e-0838-4c5f-bb9b-8628a746c800","anthropic-buy-books-scan-destroy-training-zh","Anthropic買書掃描再銷毀，想守住訓練合法性","https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1785396792157-cnvv.png","2026-07-30T07:32:42.993389+00:00",{"id":64,"slug":65,"title":66,"cover_image":67,"image_url":67,"created_at":68,"category":13},"c8975000-183e-40a3-8166-f82e7df426f9","huang-open-letter-open-weight-ai-playbook-zh","黃仁勳把開放權重變成政策模板","https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1785378794029-2xws.png","2026-07-30T02:32:49.564763+00:00",{"id":70,"slug":71,"title":72,"cover_image":73,"image_url":73,"created_at":74,"category":13},"3eb8d253-88d2-4abb-8a20-d0cd2cbf8ec1","32-firms-back-open-weight-ai-dc-letter-zh","32 家公司挺開放權重 AI","https:\u002F\u002Fxxdpdyhzhpamafnrdkyq.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Fcovers\u002Finline-1785376966978-w5h4.png","2026-07-30T02:02:24.180115+00:00",[76,81,86,91,96,101,106,111,116,121],{"id":77,"slug":78,"title":79,"created_at":80},"ee073da7-28b3-4752-a319-5a501459fb87","ai-in-2026-what-actually-matters-now-zh","2026 AI 真正重要的事","2026-03-26T07:09:12.008134+00:00",{"id":82,"slug":83,"title":84,"created_at":85},"83bd1795-8548-44c9-9a7e-de50a0923f71","trump-ai-framework-power-speech-state-preemption-zh","川普 AI 框架瞄準電力、言論與州權","2026-03-26T07:12:18.695466+00:00",{"id":87,"slug":88,"title":89,"created_at":90},"ea6be18b-c903-4e54-97b7-5f7447a612e0","nvidia-gtc-2026-big-ai-announcements-zh","NVIDIA GTC 2026 重點拆解","2026-03-26T07:14:26.62638+00:00",{"id":92,"slug":93,"title":94,"created_at":95},"4bcec76f-4c36-4daa-909f-54cd702f7c93","claude-users-spreading-out-and-getting-better-zh","Claude 用戶更分散，也更會用","2026-03-26T07:22:52.325888+00:00",{"id":97,"slug":98,"title":99,"created_at":100},"bd903b15-2473-4178-9789-b7557816e535","openclaw-raises-hard-question-for-ai-models-zh","OpenClaw 逼問 AI 模型價值","2026-03-26T07:24:54.707486+00:00",{"id":102,"slug":103,"title":104,"created_at":105},"eeac6b9e-ad9d-4831-8eec-8bba3f9bca6a","gap-google-gemini-checkout-fashion-search-zh","Gap 把結帳搬進 Gemini","2026-03-26T07:28:23.937768+00:00",{"id":107,"slug":108,"title":109,"created_at":110},"0740e53f-605d-4d57-8601-c10beb126f3c","google-pushes-gemini-transition-to-march-2026-zh","Google 把 Gemini 轉換延到 2026 年 3…","2026-03-26T07:30:12.825269+00:00",{"id":112,"slug":113,"title":114,"created_at":115},"e660d801-2421-4529-8fa9-86b82b066990","metas-llama-4-benchmark-scandal-gets-worse-zh","Meta Llama 4 分數風波又擴大","2026-03-26T07:34:21.156421+00:00",{"id":117,"slug":118,"title":119,"created_at":120},"183f9e7c-e143-40bb-a6d5-67ba84a3a8bc","accenture-mistral-ai-sovereign-enterprise-deal-zh","Accenture 攜手 Mistral AI 賣主權 AI","2026-03-26T07:38:14.818906+00:00",{"id":122,"slug":123,"title":124,"created_at":125},"191d9b1b-768a-478c-978c-dd7431a38149","mistral-ai-faces-its-hardest-year-yet-zh","Mistral AI 迎來最硬的一年","2026-03-26T07:40:23.716374+00:00"]