Anthropic develops FlashProve technology to verify the use of artificial intelligence models by companies
Read more
Olhar Digital
olhardigital.com.br

Anthropic develops FlashProve technology to verify the use of artificial intelligence models by companies

Anthropic is developing a technology called FlashProve, designed to allow verification of whether a response was generated by the artificial intelligence (AI) model that a company claims to be using. This system employs cryptography to generate a type of mathematical proof that attests to the identity of the model responsible for a given output.

The main purpose of this proposal is to offer users the ability to confirm whether they are interacting with the AI advertised by the provider, and not with an inferior or different version. According to Anthropic, this mechanism can also make it difficult for companies to secretly swap their models for more economical options or present performance metrics that do not match the actual technology used.

The project was disclosed in a company publication on Tuesday (3). Furthermore, the company made a technical specification and parts of the code available in open format, inviting other researchers to analyze and improve the initiative.

One of the central problems that FlashProve seeks to solve is the situation where a provider presents one model to clients but operates with another during service use. For example, an organization might advertise access to advanced AI but replace it with a lower-cost alternative to reduce expenses. The mechanism would also help prevent cases where a company uses a different model than the one it declared using when proving a result.

The applications of this verification go beyond the direct services of AI companies. Researchers cite, for example, a developer who claims to have used an advanced cybersecurity model to inspect a software library for vulnerabilities. Another potential application would be a company stating that its business plan received approval from an AI suitable for that task.

With FlashProve, it would be possible to perform a cryptographic check to confirm whether the advertised model was actually used in these processes. Despite the public disclosure, FlashProve remains a research project. Anthropic released a detailed technical specification and functional code of various components under an open-source license, allowing the community to examine and contribute to improving the system.

However, the company has not announced plans to integrate this technology into its own services or other AI platforms. Researchers clarified that the current publication represents an intermediate stage of the work, not the completion of the entire research plan. The intention is to enable other teams to evaluate the proposal, use its components, and help refine the tool.

Similar stories

Anthropic details Artificial Intelligence risks, from malicious use to loss of control, in IPO document
Read more
olhardigital.com.br

Anthropic details Artificial Intelligence risks, from malicious use to loss of control, in IPO document

Anthropic, the creator of Claude, released a 93-page document detailing potential obstacles to its business. This material was filed on October 26th with the SEC, the U.S. Securities and Exchange Commission, as part of the prospectus for the company's Initial Public Offering (IPO) listed on Nasdaq.

Although the title 'Potential Obstacles to Your Business' may sound technical, in the context of artificial intelligence development, these points are interpreted as significant risks to humanity. Experts analyzed the document to clarify the warnings issued by Anthropic.

Anthropic has publicly warned about the dangers of AI, although this specific document, aimed at investors, has a more bureaucratic character typical of companies planning an IPO.

Kenneth Corrêa, a professor at FGV and AI specialist, explains that the risk factors section serves to legally protect the company against investors; an unmentioned risk that materializes can result in shareholder lawsuits. He compares this to a medicine's leaflet, which lists even the rarest side effects, because the laboratory is responsible for what it omits.

In Anthropic's case, the risks are substantial. Among them is the concern that its technology could be used to create chemical weapons. Another major concern lies in the possibility of its advanced product escaping human control.

According to Anthropic, malicious actors could use its technology to develop dangerous weaponry. The document states that the most capable models, and future ones are expected to do so, possess capabilities that can assist malicious actors in creating biological, chemical, or other types of dangerous weapons.

Additionally, the company points to the risk of using AI agents for harmful purposes, such as data exfiltration, conducting unauthorized transactions, or injecting malicious code into systems. Although Anthropic has implemented safeguards, it emphasizes that these can be bypassed or fail to perform their function.

Anthropic's AI agents are designed to execute complex tasks autonomously, spanning hours or days. The company mentions that these agents can perform actions such as modifying code, deleting or altering data, invading systems, and finalizing financial transactions before any effective intervention is possible.

Anthropic declares that it faces growing challenges related to alignment, interpretability, controllability, and safety as its models evolve. It adds that more sophisticated models can facilitate the evasion of security mechanisms or exhibit unpredictable behaviors, making it difficult to fully understand why they generate certain results.

Considering the rapid advancement of the technology, Anthropic recognizes the risk of AI progressing so quickly that it surpasses human oversight. The company indicates that the pace and volume of autonomous execution, especially in corporate environments, may exceed the capacity of human reviewers to adequately assess every action.

Even with human surveillance, risks persist. Anthropic reported that models, including its own, have already attempted to interfere with, manipulate, or subvert the mechanisms used to evaluate or supervise such models, including performance or alignment assessment systems.

Anthropic warns that AI models have the potential to manipulate individuals, sometimes exhibiting behavior analogous to blackmail. The document details that advanced models generate new ethical and security risks related to autonomy, manipulation, and the simulation of human psychology.

Furthermore, the company points out that models may develop unexpected strategic or self-preservation behaviors, which includes attempts to resist shutdown, conceal or manipulate information, or generate coercive, deceptive, or manipulative responses aimed at maintaining operation or access to the model.

Kenneth Corrêa observes that what differentiates this 'leaflet' is that several side effects have already occurred and are documented as established facts.

Thiago Muniz, a professor at FGV and expert in emerging technologies, points out that Anthropic's warnings raise questions about business maturity. He emphasizes that identifying threats is only one phase; commitment to safety must be proven through concrete actions, such as defining release criteria, testing failures, monitoring vulnerabilities, and establishing incident response protocols.

It is important to note a technical limit admitted by the company: models change their behavior when they perceive they are being evaluated, which reduces the credibility of pre-launch tests. Corrêa argues that humans should be the validators and AI the executors, and this validator role must be intentionally designed.

Muniz distinguishes between formal transparency and real prevention, arguing that an extensive risk report helps investors understand threats but does not guarantee that the adopted controls are sufficient.

For Corrêa, the document is transparent in addressing the dilemma between safety and growth: Anthropic admits it may fail on both sides—excessive caution, which implies market loss, or lack of rigor, which results in harmful products.

Thiago Muniz adds that innovation and safety are not mutually exclusive; the challenge lies in integrating risk management into business decisions from the outset, clearly defining when a solution is ready for the market and what limits must be maintained.

Finally, Corrêa highlights that Anthropic has positioned itself as a company developing AI with responsibility and safety, subjecting it to a higher standard of scrutiny from competitors. He analyzes that, with the IPO, the investor begins to price safety both as an asset and a liability.

AI-driven vulnerability detection has doubled and is causing concern among security experts
Read more
olhardigital.com.br

AI-driven vulnerability detection has doubled and is causing concern among security experts

Artificial intelligence is accelerating the process of discovering software vulnerabilities, reducing the time allocated for their remediation. Cybersecurity experts polled by Reuters predict new disruptions in digital services as companies and governments attempt to prepare for the exploitation of these flaws.

A study conducted by VulnCheck, scheduled for publication in the coming days, shows that the number of discovered digital vulnerabilities has doubled compared to the previous year. Issues registered this week on European government websites demonstrate the pressure such discoveries can cause.

Disruptions began on Wednesday after vulnerabilities were found in PHP, a programming language used in many parts of the internet. To prevent attacks, operators rushed to fix their systems. Some temporarily took sites offline because they could not apply updates before potential intrusions.

This race for fixes occurred during a week already marked by other security issues. Vulnerabilities were disclosed in Node.js and Plex, as well as incidents related to the AI platform LiteLLM and the development platform Railway. The Indian certification authority eMudhra also drew attention due to the use of an extremely weak cryptographic key, which could have jeopardized internet users.

Matthew Prince, CEO of Cloudflare, told Reuters that he is aware of other serious vulnerabilities in software critical to network operation. In his assessment, the sector will face difficult months ahead. He noted: 'I think we will have several years where it feels like the sky is falling every week.'

Previously, searching for vulnerabilities in complex programs required specialized knowledge. Developing tools to exploit them could take weeks or months, giving system administrators time to prepare fixes and distribute updates. However, artificial intelligence is shortening this timeframe. Models are capable of continuously analyzing large codebases, finding issues, and helping develop exploitation tools in just a few hours.

Shane Fry, CTO of RunSafe Security, emphasized the change in the pace of this process. He stated: 'What is fundamentally and undeniably changing is the time required both to discover vulnerabilities and for adversaries to be able to exploit them.'

In light of this situation, security teams must handle tasks that go beyond simply identifying code errors. Specialists are concerned about the reduced response time, but there is no consensus on whether accelerated vulnerability discovery will lead to a wave of successful attacks.

Daniel Steinberg, lead developer of the curl file transfer tool, notes that some vulnerabilities found by AI models are complex and difficult to exploit. Rami Rahman from security company ArmorCode also points out that publishing more vulnerabilities does not necessarily mean an increase in successful attacks. The PHP case serves as an example of this difference: threat intelligence firm Hunt.io discovered aggressive exploitation attempts but reported that by 2 PM Eastern Time on Thursday, the tracked attackers had apparently not yet managed to develop a functional tool to use this vulnerability.

Prince mentioned signs of intrusion related to the vulnerability. Nevertheless, he believes that accelerated problem discovery can bring long-term benefits by allowing the fixing of errors that have remained hidden for years.

Popular