1、TLP:CLEAR TLP:CLEAR TLP:CLEARTLP:CLEAR JCDC AI Cybersecurity Collaboration PlaybookJCDC AI Cybersecurity Collaboration PlaybookJoint Cyber Defense Collaborative Cybersecurity and Infrastructure Security Agency January 14,2025 This document is marked TLP:CLEAR:Disclosure is not limited.For more infor

2、mation on the Traffic Light Protocol,see https:/www.cisa.gov/tlp.JCDC AI Cybersecurity Collaboration PlaybookTLP:CLEARTLP:CLEAR TLP:CLEARTLP:CLEAR Page 2 of 33 Table of Contents Acknowledgements.3 Questions and Feedback.5 Disclaimer.5 Audience.6 Background.6 Purpose.6 Key Definitions.7 Information S

3、haring:Protections and Mechanisms.8 Information-Sharing Protections.8 Information-Sharing Mechanisms.9 Information Sharing Within JCDC.9 Newly Identified Vulnerability Coordination.10 Incident Reporting.10 Proactive Information Sharing.11 Information Sharing Regarding an Incident or Vulnerability.12

4、 CISAs Information Analysis and Operational Use.17 Enhanced Coordination.18 Call to Action.19 Appendix A:Populated Example of Checklists for Information Handling Restrictions and Voluntary Information Sharing.21 Appendix B:Case Studies for Proactive Information Sharing and Enhanced Coordination.26 P

5、roactive Information Sharing Example:Clearview AI Misconfiguration Case Study.26 Enhanced Coordination Example:Compromised PyTorch Dependency Chain.27 Appendix C:Additional Avenues for Voluntary Information Sharing.29 Appendix D:Additional Resources.32 JCDC AI Cybersecurity Collaboration PlaybookTLP

6、:CLEARTLP:CLEAR TLP:CLEARTLP:CLEAR Page 3 of 33 AcknowledgementsAcknowledgements The Cybersecurity and Infrastructure Security Agency(CISA)1 led the development of the Artificial Intelligence(AI)Cybersecurity Collaboration playbook in collaboration with federal,international,and private sector partn