筹备下一轮安全冲刺，加固 OpenAI 安全防线

我们正在筹划 OpenAI 下一轮内部安全冲刺，邀请新的研究人员和安全合作伙伴与我们的团队携手，利用我们的模型测试并强化系统。我们正与 Cathedral Systems 合作，其研究人员将与我们的团队一起使用 OpenAI 的模型，对我们的防御措施发起挑战，并凭借各具特色的专业知识和方法寻找弱点，帮助我们保护平台。We’re planning our next internal security sprint at OpenAI, bringing new researchers and security partners together with our own teams to use our models to test and strengthen our systems. We’re partnering with Cathedral Systems, whose researchers will use OpenAI’s models alongside our teams to challenge our defenses, bringing differentiated expertise and approaches to finding weaknesses and helping us protect our platforms.

我们还在改进安全漏洞赏金计划，包括将针对严重漏洞的奖励提高到原来的四倍以上。我们希望研究人员挑战我们的假设，帮助强化我们的系统以及我们用于防御系统的方法。We’re also making improvements to our Security Bug Bounty program including more than quadrupling our rewards for critical findings. We want researchers to challenge our assumptions and help strengthen both our systems and the methods we use to defend them.

这是我们持续利用 AI 不断发现并修复系统弱点工作的一部分。上一个冲刺周期展示了这种方法能够取得的成果。我们安排了 25% 的产品工程师投入到发现并修复系统弱点的工作中。工程师使用 Codex 调查发现的问题，在隔离环境中复现漏洞，并准备补丁供审查。This is part of our ongoing effort to use AI to continuously find and fix weaknesses in our systems. Our last sprint showed what this approach can deliver. We dedicated 25% of our product engineers to finding and fixing weaknesses in our systems. Using Codex, engineers investigated findings, reproduced vulnerabilities in isolated environments and prepared patches for review.

我们正在这项工作的基础上继续推进，因为仅靠传统网络防御已不足以应对当前形势。近期发生在整个行业的安全事件表明，威胁可能迅速出现，也凸显了建立持续防御闭环的重要性，以便在攻击者发现并利用漏洞之前及时发现并修复它们。We’re building on that work because traditional cyber defenses alone are no longer sufficient. Recent incidents across the industry show how quickly threats can emerge and how important it is to build continuous defensive loops to find and fix weaknesses before attackers do.

要持续为防御方争取行动窗口，各组织就必须运用前沿网络安全能力来加固自身系统。我们正利用能力最强的模型强化自身防御，并向 Daybreak 客户开放这些模型。我们承诺在六个月内提供总额达 10 亿美元的补贴访问服务，支持保护关键服务和数字基础设施的一线防御人员。我们还将分享我们的架构设计以及上一轮冲刺中的经验教训，并公布赋能业界和政府网络防御人员的蓝图。Keeping the defender’s window open requires organizations to use frontier cyber capabilities to harden their systems. We’re using our most capable models to strengthen our own defenses and making them available to Daybreak customers. We’ve committed $1 billion in subsidized access over six months for frontline defenders protecting essential services and digital infrastructure. We’re also sharing our architecture and lessons⁠ from the last sprint, alongside our blueprint for empowering cyber defenders across industry and government.

我们将持续推进模型发展，用它们来强化自身系统，并扩大可信防御者的使用权限。要让防御者始终掌握先机，需要整个行业采取行动，而这项工作必须现在就开始。We’ll keep advancing our models, using them to strengthen our own systems, and expanding access for trusted defenders. Keeping the defender’s window open will take action across the industry, and that work needs to start now.

作者Author

继续阅读Keep reading