DAVLAT TASHKILOTLARIDA GENERATIV SUN’IY INTELLEKTDAN FOYDALANISHDA KIBERXAVFSIZLIKNI TA’MINLASH: XORIJ TAJRIBASI VA ZAMONAVIY YONDASHUVLAR
Keywords:
generativ sun’iy intellekt, davlat tashkiloti, kiberxavfsizlik, prompt injection, ma’lumotlar maxfiyligi, RAG, minimal vakolat, inson nazorati, audit.Abstract
Maqolada davlat tashkilotlarida generativ sun’iy intellektdan foydalanish bilan bog‘liq kiberxavfsizlik muammolari tahlil qilinadi. AQSH, Buyuk Britaniya, Yevropa Ittifoqi va Singapurning rasmiy qo‘llanmalari hamda amaliy yechimlari qiyoslanadi. Ma’lumotlar sizishi, zararli ko‘rsatmalar, bilimlar bazasi zaifliklari va agentlarga ortiqcha vakolat berish xavflari tizimlashtiriladi. Tahlil asosida ma’lumot sezgirligi, bajariladigan amal oqibati va vakolat chegaralarini birgalikda hisobga oluvchi ko‘p qatlamli himoya modeli taklif etiladi.
References
1. OECD. (2025). Governing with Artificial Intelligence: The State of Play and Way Forward in Core Government Functions. OECD Publishing. DOI: 10.1787/795de142-en. Manba
2. NIST. (2023). Artificial Intelligence Risk Management Framework (AI RMF 1.0). NIST AI 100-1. DOI: 10.6028/NIST.AI.100-1.
3. Autio, C., Schwartz, R., Dunietz, J. va boshq. (2024). Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile. NIST AI 600-1. DOI: 10.6028/NIST.AI.600-1.
4. OWASP. (2025). Top 10 for Large Language Model Applications. 2025-yilgi nashr. OWASP Gen AI Security Project.
5. Greshake, K., Abdelnabi, S., Mishra, S., Endres, C., Holz, T., Fritz, M. (2023). Not what you’ve signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection. arXiv:2302.12173, preprint.
6. Zhan, Q., Liang, Z., Ying, Z., Kang, D. (2024). InjecAgent: Benchmarking Indirect Prompt Injections in Tool-Integrated Large Language Model Agents. Findings of ACL 2024, 10471–10506. DOI: 10.18653/v1/2024.findings-acl.624.
7. NCSC, CISA va xalqaro hamkorlar. (2023). Guidelines for Secure AI System Development. 27 November.
8. Government Digital Service. (2025). Artificial Intelligence Playbook for the UK Government. 10 February. Manba
9. ENISA. (2023). Multilayer Framework for Good Cybersecurity Practices for AI. DOI: 10.2824/588830. Manba
10. ENISA. (2026). ENISA’s View on Cybersecurity in the Frontier AI Era. 7 July.
11. Cyber Security Agency of Singapore. (2024). Guidelines and Companion Guide on Securing AI Systems. 15 October.
12. Ministry of Digital Development and Information, Singapore. (2026). Singapore Launches New Model AI Governance Framework for Agentic AI. 22 January.
13. Open Government Products. (sanasiz). Pair. Davlat xizmatchilari uchun SI xizmatining rasmiy sahifasi. Murojaat sanasi: 29.09.2026.
14. OWASP. (2025). LLM08:2025 Vector and Embedding Weaknesses. OWASP Gen AI Security Project.
15. Canadian Centre for Cyber Security. (2024). Joint Advisory on Deploying AI Systems Securely. NSA, CISA va hamkorlar qo‘shma qo‘llanmasi haqidagi rasmiy material. 15 April.
