Cryptographyapplication guideforgenerativeartificialintelligencesystems (版本1.0) 中国密码学会密评联委会 目次 前言...............................................................................................................................................................III1范围.....................................................................................................................................................................12规范性引用文件.................................................................................................................................................13术语和定义.........................................................................................................................................................14缩略语.................................................................................................................................................................35概述.....................................................................................................................................................................46安全风险.............................................................................................................................................................56.1运行环境与基础设施安全风险.................................................................................................................56.1.1网络环境安全风险..............................................................................................................................56.1.2计算环境安全风险..............................................................................................................................56.1.3存储环境安全风险..............................................................................................................................56.1.4供应链安全风险..................................................................................................................................56.2数据安全风险..............................................................................................................................................56.2.1预训练数据安全风险..........................................................................................................................56.2.2优化训练数据安全风险......................................................................................................................66.2.3使用阶段数据安全风险......................................................................................................................66.3模型安全风险..............................................................................................................................................66.3.1模型篡改与泄露风险..........................................................................................................................66.3.2模型对抗攻击风险..............................................................................................................................66.4应用安全风险..............................................................................................................................................66.4.1人工智能模型服务风险......................................................................................................................66.4.2智能体应用安全风险..........................................................................................................................77密码应用技术框架.............................................................................................................................................78密码应用指引.....................................................................................................................................................88.1通用安全要求..............................................................................................................................................88.2运行环境与基础设施安全.........................................................................................................................88.2.1网络安全保护对象..............................................................................................................................88.2.2计算安全保护对象..............................................................................................................................88.2.3存储安全保护对象..............................................................................................................................98.2.4供应链安全保护对象..........................................................................................................................98.3数据安全......................................................................................................................................................98.3.1数据通用安全......................................................................................................................................98.3.2预训练数据安全..................................................................................................................................98.3.3优化训练数据安全.........................................