Google expands its bug bounty program to target generative AI attacks

Joystiq

Joystiq News
With concerns around generative AI ever-present,
Please, Log in or Register to view URLs content!
focused on AI-specific attacks and opportunities for malice. As such, the company released updated guidelines detailing which discoveries qualify for rewards and which fall out of scope. For example, discovering training data extraction that leaks private, sensitive information falls in scope, but if it only shows public, nonsensitive data, then it wouldn't
Please, Log in or Register to view URLs content!
. Last year, Google gave security researchers $12 million for bug discoveries.

Google explained that AI presents different security issues than their other technology — such as
Please, Log in or Register to view URLs content!
and unfair bias — requiring new guidance to mirror this. "We believe expanding the VRP will incentivize research around AI safety and security, and bring potential issues to light that will ultimately make AI safer for everyone," the company said in a statement. "We're also expanding our open source security work to make information about AI supply chain security universally discoverable and verifiable."


AI companies, including Google, gathered at the White House earlier this year, committing to greater discovery and awareness of AI's vulnerabilities. The company's VRP expansion also comes ahead of a
Please, Log in or Register to view URLs content!
reportedly scheduled for Monday, October 30, which would create strict assessments and requirements for AI models before any use by government agencies.

This article originally appeared on Engadget at
Please, Log in or Register to view URLs content!


Please, Log in or Register to view URLs content!


Console Bang News!
 

Users who are viewing this thread

Top