IT之家 · 智能时代 · 10/13/2026, 11:32:28

Anthropic Deploys Anti-Distillation Guardrails: Cuts Inference Chain Extraction by 99% with <0.1% False Positives

By IT之家Original title: Anthropic 推出新防护措施,模型蒸馏攻击窃取数据量最高降低 99%
68AI Score
Executive Summary

Anthropic has introduced new guardrails against model distillation attacks, restricting external access to Claude's reasoning process and reducing extractable inference tokens by 90-99%. The system maintains a false positive rate below 0.1% while blocking large-scale extraction attempts, leading to the ban of tens of thousands of accounts, including allegations that Zhipu AI attempted to distill capabilities from Claude during GLM-5.3 development.

SOURCE COVERAGEFull Original Report

模型蒸馏已经成为头部 AI 企业重点担忧的问题,Anthropic、OpenAI、谷歌等企业认为,这种手段可以让竞争对手以更低成本、更快速度复刻出模型的前沿能力。

Anthropic 称,这套用于限制外界获取 Claude 推理过程的防护机制,大幅减少了信息提取行为。如今“蒸馏攻击者所能提取到的推理词元(token)数量,仅为之前的十分之一至百分之一”。

IT之家注意到,这家总部位于加州的企业表示,新防护提升了使用代理网络反复探测 Claude 受保护推理链路的难度,拦截信息提取尝试,阻碍大规模蒸馏行动。

Anthropic 称,这套安全系统的稳健程度“大致相当于阻止 Claude 协助制造生物武器的防护体系”,误报率低于 0.1%。

Anthropic 封禁了数万个和蒸馏活动相关的账号,并以 AI 初创企业智谱 AI 举例,称该公司在研发 GLM-5.3 模型期间,曾尝试从 Claude 蒸馏提取模型能力。Anthropic 警告,这类行为会带来安全与国家安全风险。