Скачать с ютуб Second AIBOM Workshop at SBOM-a-rama 2024 в хорошем качестве

Second AIBOM Workshop at SBOM-a-rama 2024

Meeting Summary Date: Sept 12, 2024 Location: Denver, SBOM-a-rama Fall 2024 Key Topics Discussed: Helen emphasized the need to keep pace with innovation, highlighting the importance of embedding this within product, engineering, compliance, and legal teams. Discussion on the clustering of use cases around these areas. AIBOM and SBOM Frameworks: Raymond inquired about an equivalent framework for #SBOM that could be referenced for AIBOMs. Helen and John Kavanaugh discussed the similarities and differences between AIBOMs and SBOMs, noting that while some components are similar, #AIBOMs have unique elements. Use Cases and Frameworks: Helen presented an example use case, emphasizing the need to simplify documentation for industry usability. The importance of contributions from all team members to understand different perspectives was highlighted. Glossary and Definitions: Discussion on the publication of a glossary before delving into detailed work. The glossary is being developed in parallel with use cases. Research Insights from SAP: Helen shared insights from SAP's research on AIBOMs, focusing on identifying minimum fields for implementation and automating AI risk assessments. The research included mapping fields from SPDX and CycloneDX formats to AIBOMs use cases. Compliance and Regulatory Considerations: The importance of compliance use cases was discussed, specifically mentioning California's SB 1047 and other regulatory frameworks. The need for representatives from regulatory bodies to provide insights and feedback was highlighted. Field Mapping and MVP: Consensus on starting with a Minimum Viable Product (MVP) for AIBOM field mapping. Discuss the need for experts from SPDX and CycloneDX to assist with field mapping. Life Cycle Considerations: Discussion on the timing of AIBOMs generation within the AI lifecycle, including planning, validation, and deployment stages. The potential for continuous AIBOMs generation and the complexities involved. Practical Applications and Use Cases: Examples of practical applications of AIBOMs include identifying vulnerabilities in models and datasets. The importance of consistent generation of model cards using AIBOMs. Next Steps and Action Items: Develop a template for mapping MVP fields. Identify and involve experts from SPDX and CycloneDX. Reach out to regulatory representatives for insights on compliance use cases. Schedule follow-up meetings and workshops to continue discussions and refine the AIBOMs framework. Action Items: Helen: Send out calendar invites and share the meeting minutes on GitHub. Ian: Coordinate with his team to assist with CycloneDX field mapping. Participants: Reach out to contacts in regulatory bodies and invite them to future meetings. All: Review and provide feedback on the proposed MVP fields and mapping template. Conclusion: The meeting concluded with a consensus on focusing on the MVP for AIBOMs field mapping and the importance of compliance use cases. Participants agreed to continue discussions in upcoming meetings and workshops to refine the #AIBOM framework and address outstanding issues.