A Response to NIST AI 800-1

Comments Concerning Bounty Programs, Threat Profiles, and Risk Thresholds

Julia Arnold, Sarah L. Gebauer

Expert InsightsPublished Sep 19, 2024

On October 30, 2023, President Biden signed Executive Order 14110, which aims to ensure the safe, secure, and trustworthy development of artificial intelligence (AI). As part of that effort, the National Institute of Standards and Technology (NIST) has released an initial public draft of NIST AI 800-1, Managing Misuse Risk for Dual-Use Foundation Models, to identify best practices for foundation model developers to manage the risks of their models being deliberately misused to cause harm.

This paper provides public comment on NIST AI 800-1 and suggests that foundation model developers need more-specific recommendations about bounty programs, threat profiles, and risk thresholds. This paper will be of interest to the AI security community, AI system evaluation organizations, biosecurity policy groups, and scientists.

Topics

Document Details

Citation

RAND Style Manual
Arnold, Julia and Sarah L. Gebauer, A Response to NIST AI 800-1: Comments Concerning Bounty Programs, Threat Profiles, and Risk Thresholds, RAND Corporation, PE-A3246-1, September 2024. As of September 23, 2024: https://www.rand.org/pubs/perspectives/PEA3246-1.html
Chicago Manual of Style
Arnold, Julia and Sarah L. Gebauer, A Response to NIST AI 800-1: Comments Concerning Bounty Programs, Threat Profiles, and Risk Thresholds. Santa Monica, CA: RAND Corporation, 2024. https://www.rand.org/pubs/perspectives/PEA3246-1.html.
BibTeX RIS

Funding for this research was provided by gifts from RAND supporters. The research was conducted by the Technology and Security Policy Center within RAND Global and Emerging Risks and the Community Health and Environmental Policy Program within RAND Social and Economic Well-Being.

This publication is part of the RAND expert insights series. The expert insights series presents perspectives on timely policy issues.

This document and trademark(s) contained herein are protected by law. This representation of RAND intellectual property is provided for noncommercial use only. Unauthorized posting of this publication online is prohibited; linking directly to this product page is encouraged. Permission is required from RAND to reproduce, or reuse in another form, any of its research documents for commercial purposes. For information on reprint and reuse permissions, please visit www.rand.org/pubs/permissions.

RAND is a nonprofit institution that helps improve policy and decisionmaking through research and analysis. RAND's publications do not necessarily reflect the opinions of its research clients and sponsors.