?]????DevSecOps?͒ʗp???Ȃ??H?@AI?̎?_??˂????Ђւ̍œK???uMLSecOps?v?F?T?C?????????g?D?̌??Ԃ?_??

?@?{?e?́A2025?N11???ɊJ?Â??ꂽ?Z?L?????e?B?C?x???g?uOpen Source SecurityCon?v?ɂ?????Z?b?V?????uApplying DevSecOps Lessons To MLSecOps?v?̓??e????ɉ??????B?Z?b?V?????ɂ́ADell Technologies?̃f?B?X?e?B???O?C?b?V???g?G???W?j?A?ł???A?I?[?v???\?[?X?\?t?g?E?F?A?iOSS?j?̈??S???p??ڎw???c??OpenSSF?iOpen Source Security Foundation?j??AI/ML???[?L???O?O???[?v?ƘA?g???Ċ???????T???E?G?o???X?????o?d?????B

?@?G?o???X???́AOpenSSF?????J????MLSecOps?Ɋւ???z???C?g?y?[?p?[????ɁADevSecOps????MLSecOps?ւ̈ڍs?菇??????????B???̃z???C?g?y?[?p?[?́A?ʐM?@??x???_?[Ericsson???ʐM?ƊE?????ɍ쐬????MLSecOps?̘_?????x?[?X?Ƃ??A???܂??܂ȋƊE?ōL?????p?ł???ėp?i?͂?悤?j?I?ȎQ?l?????Ƃ???OpenSSF?ŋ??????M???ꂽ???̂??B?ȉ??ɁA???̒??j?ƂȂ?Z?p?I?ȃ|?C???g?????????B

1?D?u?C???t?B?j?e?B???[?v?v?̊g???ƐӔC???L

?@DevOps?̊T?O???ے?????}?Ƃ??āA?J???iDev?j?Ɖ^?p?iOps?j???????O????`???u?C???t?B?j?e?B???[?v?v???m???Ă???B?G?o???X????́A???̏]???̃??[?v?\????AI????ɍ??킹?čĒ?`?????BAI?A?v???P?[?V?????ł́A?\?[?X?R?[?h?????ł͂Ȃ??u?f?[?^?v?Ɓu???f???v???d?v?ȍ\???v?f?ɂȂ邽?߂??B

?@?z???C?g?y?[?p?[?́A?f?[?^?????W?E???????郋?[?v?ƁAML???f?????w?K?E?]?????郋?[?v???A?]???̃R?[?h???S?̃??[?v?ƘA?g??????V???ȎQ?ƃA?[?L?e?N?`????񎦂??Ă???i?}?j?B????ɂ???āA?ǂ̃v???Z?X?łǂ̂悤?ȃZ?L?????e?B???????K?v?ɂȂ邩?????o?I?ɐ????????B

?}?@Data?AML?ADevOps?̃??[?v?\???ɁAEricsson?̎Q?ƃA?[?L?e?N?`????9?‚̃X?e?[?W???}?b?s???O?????}?i?o?T?FOpenSSF?̃z???C?g?y?[?p?[?j?s?N???b?N?Ŋg??t

?@???̐V???????[?v???񂷏?Ō??????Ȃ??̂??A?y???\?i?i?????j?̖??m?????B?]????DevOps?ɂ?????J???҂?^?p?҂ɉ????A?f?[?^?T?C?G???e?B?X?g?A?f?[?^?G???W?j?A?AML?G???W?j?A?Ƃ??????V???ȃy???\?i???lj????ꂽ?B???ʂƂ??āA?T?C?????i?Ǘ??j???????ȃf?[?^?T?C?G???X????ƃZ?L?????e?B????A?^?p????̊Ԃɋ??n?????s???A?Z?L?????e?B???g?D?S?̂́u???L???ꂽ?ӔC?v?Ƃ??ċ@?\????̐????????????B

2?D?????̃Z?L?????e?B?c?[???Ƌ??Ѓ??f???̘A?g

?@?uML???f???ɑ΂??鋺?Ђ͑???ɂ킽?邪?A?ꂩ??V?????T?O???w?ԕK?v?͂Ȃ??v?ƃG?o???X???͎w?E????B?z???C?g?y?[?p?[?̍H?v?Ƃ??āAOSS?R?~???j?e?B?[??OWASP?iOpen Worldwide Application Security Project?j????`????ML?????LLM?i??K?͌??ꃂ?f???j??????10?勺?Ѓ??X?g???̗p???Ă???_??????????B

?@????OWASP?̋??Ѓ??X?g???q?̎Q?ƃA?[?L?e?N?`????Ƀ}?b?s???O???邱?ƂŁA???C?t?T?C?N???́u?ǂ̒i?K?Łv?u?ǂ̂悤?ȋ??Ђ??v?????????邩?𗝉??ł???悤?H?v????Ă???B?d?v?Ȃ̂́A?????̋??Ђɑ΂???Z?L?????e?B?R???g???[???Ƃ??āA?????̃I?[?v???\?[?X?c?[???Q???ǂ̂悤?ɓK?p?ł??邩?????????_???B

?@?Ⴆ?΁A?\?t?g?E?F?A?T?v???C?`?F?[???̈??S?????m?ۂ???t???[?????[?N?ł???uSLSA?v??A?Z?L?????e?B?X?R?A???Z?o????uScorecard?v?A?A?[?e?B?t?@?N?g?̏?????????uSigstore?v?Ȃǂ??AML?p?C?v???C???̊e?i?K?Ƀ}?b?s???O????Ă???B

?@???ڂ??ׂ???Sigstore?̊??p???B?\?t?g?E?F?A?̃R?[?h?????Ƃ????T?O?????p???A?uOpenSSF Model Signing Schema?v?iMSS?j?ƌĂ΂??d?g?݂?ʂ??āA?f?v???C?O??ML???f?????̂ɏ??????A???̏o???Ɗ??S???????؂??邱?Ƃ??”\?ɂȂ??Ă???B???̂悤?ɁA?\?t?g?E?F?A?Z?L?????e?B?̗̈?Ŕ|??ꂽ???S?ȃc?[???Q???AML?̕????ւƓ]?p????A?v???[?`???񎦂???Ă???B

3?DAI?Z?L?????e?B?̖????F???U????W???

?@?Z?b?V?????̌??тƂ??āAAI?Z?p?̋}???Ȑi???ɑ΂???Z?L?????e?B?R?~???j?e?B?[?݂̍???ɂ‚??ēW?]?????ꂽ?B????AI?ɑ΂???Z?L?????e?B??@???m??????‚‚??钆?A???łɎ????I?ɍs??????AI?G?[?W?F???g?̑䓪?Ƃ????V???Ȕg???????񂹂Ă???B

?@AI?Ɋւ???Z?p?v?V??W?????̋c?_?́AOSS?Ǘ??c?̂?Linux Foundation??Cloud Native Computing Foundation?iCNCF?j?ȂǁA???܂??܂ȏꏊ?œ????????I?ɐi?s???Ă???B?????Ő?????̂??A?uAI??p?̐V???ȃZ?L?????e?B?c?̂?ݗ????ׂ????ǂ????v?Ƃ????c?_???B

?@?G?o???X???̌????͖??m???B?uAI???f???͊????̃\?t?g?E?F?A?V?X?e???ɍ\?z????Ă??邽?߁A?S???V?????Z?L?????e?B?c?̂??ꂩ???蒼???K?v?͂Ȃ??v?Ƃ????B???łɈ??肵?ĉғ????Ă???OpenSSF?̂悤?Ȋ????̃Z?L?????e?B?C???t?????????_?Ƃ??A?????Ŕ|??ꂽ?m???Ǝd?g?݂̏??AI?Z?L?????e?B???W?񂵂Ă????ׂ????Ɠ????͋???????B

?@DevSecOps?̗??j???ؖ?????悤?ɁA?Z?L?????e?B?͌?t???ł͂Ȃ??A?݌v?i?K????g?ݍ??܂??ׂ????BMLSecOps?Ƃ????V???ȃA?v???[?`?́AAI?Z?p???????炷???m?̃??X?N?ɑ΂??錻???I???Ž??H?I?ȓ?????ׂɂȂ?B

?{?e?́ACNCF??2025?N11??25???Ɍ??J????????uApplying DevSecOps Lessons To MLSecOps - Sarah Evans, Dell Technologies?v????ɍ쐬???܂????B