Thiet lap Bao mat va Sandbox

Kham pha cach Cowork bao ve he thong cua ban voi cach ly VM, kiem soat quyen va co che an toan. Thuc hanh tot nhat de su dung an toan cac agent AI tu chu.

Claude Cowork theo duoi chien luoc bao mat Defense-in-Depth. Khac voi cac chatbot AI thong thuong chay truc tiep trong trinh duyet, Cowork hoat dong nhu mot agent tu chu voi quyen truy cap he thong tep va do do can cac co che cach ly manh me de bao ve he thong cua ban.

Mo hinh bao mat ket hop cach ly VM dua tren phan cung, cap quyen ro rang, bo phan loai noi dung de phat hien prompt injection va reinforcement learning de nhan dien va tu choi cac chi dan doc hai.

schema So do Kien truc Bao mat

desktop_mac

macOS Host

Tep he thong va ung dung duoc bao ve

memory

VZVirtualMachine

Sandbox Apple Virtualization Framework

smart_toy

Claude Agent

Chay trong VM Linux cach ly

Cach ly Chi thu muc da mount

Cach ly VM voi Apple Virtualization Framework

Cowork khong chay truc tiep tren macOS host cua ban. Thay vao do, no su dung framework VZVirtualMachine cua Apple de khoi dong mot VM Linux nhe, tuy chinh. Cung la cong nghe ma Docker Desktop su dung tren macOS.

verified_user

Cach ly Tien trinh

Agent chay trong mot phien ban he dieu hanh hoan toan rieng biet. Ngay ca khi bi xam nhap, no khong the vuot qua ranh gioi VM.

folder_off

Khong Truy cap He thong

Khong the truy cap tep he thong macOS, ung dung hoac thu muc ma ban chua cho phep ro rang.

memory

Toi uu cho Apple Silicon

Su dung ao hoa dua tren ARM va Unified Memory de giam thieu chi phi hieu nang.

restart_alt

Khoi dong lai Moi Phien

Moi phien Cowork bat dau voi trang thai VM sach. Malware khong the ton tai qua cac phien.

lightbulb

Thong tin Ky thuat

Framework VZVirtualMachine khoi dong mot he thong tep goc Linux tuy chinh duoc thiet ke dac biet cho Cowork. Dieu nay cho phep cach ly nghiem ngat va agent chi co the truy cap cac thu muc duoc "mount" ro rang vao moi truong VM.

He thong Quyen

Cowork tuan theo nguyen tac dac quyen toi thieu. Ban co quyen kiem soat chinh xac cac thu muc ma Claude co the truy cap va agent yeu cau phe duyet ro rang truoc khi thuc hien cac hanh dong quan trong.

folder_shared

Truy cap Thu muc

Truoc khi bat dau tac vu, ban chon cac thu muc ma Cowork co the truy cap. Claude chi co the doc, ghi, tao va xoa tep trong cac thu muc da mount. Tai lieu, Desktop va cac thu muc khac duoc bao ve tru khi ban cho phep ro rang.

approval

Xac nhan Hanh dong

Doi voi cac hanh dong quan trong nhu xoa nhieu tep, Claude tam dung va yeu cau xac nhan. Ban co the xem xet cac hanh dong de xuat va phe duyet hoac tu choi truoc khi tiep tuc.

visibility

Nhat ky Hoat dong Thoi gian Thuc

Ban co the xem Cowork dang lam gi trong thoi gian thuc. Tat ca cac thao tac tep, yeu cau mang va hanh dong duoc ghi lai va hien thi trong giao dien. Ban co the tam dung hoac dung thuc hien bat ky luc nao.

Co che An toan

psychology

Bao ve Reinforcement Learning

Claude duoc huan luyen voi RLHF (Reinforcement Learning from Human Feedback) de nhan dien va tu choi cac chi dan doc hai. No tu choi cac yeu cau co the gay hai cho he thong hoac du lieu cua ban.

security

Bo phan loai Noi dung

Trong khi duyet web hoac xu ly tep, bo phan loai noi dung quet noi dung khong dang tin cay de tim cac prompt injection tiem nang (van ban an co gang thao tung agent thuc hien cac hanh dong khong mong muon).

history

Nhat ky Kiem toan

Ban ghi day du tat ca cac hanh dong trong phien. Ban co the xem khi nao, gi va tren tep nao Claude da lam viec. Huu ich de theo doi thay doi hoac hoan tac khi can.

cloud_off

Xu ly Tep Cuc bo

Tep duoc xu ly cuc bo trong may ao. Noi dung tep khong duoc tai len may chu ben ngoai hoac duoc su dung de huan luyen mo hinh. Chi ngu canh hoi thoai duoc gui den API Claude.

Thuc hanh Tot nhat ve Bao mat

check_circle

Cap Quyen Truy cap Thu muc Toi thieu

Chi mount cac thu muc can thiet cho tac vu. Dung cap quyen truy cap toan bo thu muc home; tao thu muc lam viec rieng.

check_circle

Sao luu Tep Quan trong

Truoc khi Cowork to chuc lai hoac sua doi tep, dam bao ban co ban sao luu. Sandbox bao ve he dieu hanh nhung khong bao ve du lieu trong cac thu muc da cho phep.

check_circle

Xem xet Ke hoach Truoc khi Thuc hien

Claude hien thi ke hoach truoc khi bat dau tac vu. Danh thoi gian xem xet, dac biet khi bao gom xoa hoac sua doi tep.

check_circle

Dua ra Chi dan Cu the

Cac chi dan mo ho nhu "don dep moi thu" co the dan den xoa khong mong muon. Chi ro rang nhung gi can giu, sua doi va xoa.

check_circle

Giam sat Tac vu Trinh duyet

Khi chay tac vu web voi tien ich mo rong Chrome, luu y rang cac trang web doc hai co the co gang prompt injection. Giam sat nhat ky hoat dong trong cac tac vu web.

Han che Da biet

Hieu cac han che cua mo hinh bao mat giup ban su dung Cowork an toan:

warning

Khong Bao ve khoi Chi dan cua Chinh ban

Neu ban chi dan Claude xoa tep, chung se bi xoa. Sandbox bao ve khoi cac moi de doa ben ngoai nhung khong bao ve khoi cac lenh ma ban da cho phep ro rang.

warning

Rui ro Prompt Injection

Mac du bo phan loai giup phat hien prompt injection, cac cuoc tan cong co chu dich tu cac trang web doc hai co the thanh cong. Giam sat can than cac tac vu duyet web.

warning

Kha nang Ro ri Du lieu

Neu truy cap mang duoc bat, mot phien bi xam nhap co the gui du lieu den may chu ben ngoai. Su dung giam sat mang cho cac tac vu nhay cam.

warning

Ban Xem truoc Nghien cuu

Cowork van dang trong giai doan xem truoc nghien cuu. Cac bien phap bao mat se phat trien khi san pham truong thanh.

Xu ly Su co

VM khong khoi dong expand_more

Dam bao ban dang su dung Mac voi Apple Silicon (M1/M2/M3/M4). Framework VZVirtualMachine yeu cau kien truc ARM. Dong thoi dam bao co du dung luong luu tru cho viec tai he thong tep Linux.

Truy cap thu muc bi tu choi mac du da cap quyen expand_more

Kiem tra Cai dat He thong macOS > Rieng tu & Bao mat > Tep & Thu muc. Dam bao Claude Desktop co cac quyen can thiet. Ban co the can khoi dong lai ung dung sau khi cap quyen.

Claude tu choi cac tac vu an toan expand_more

Doi khi bo phan loai bao mat co the qua than trong. Thu viet lai yeu cau cua ban cu the hon. Neu Claude tiep tuc tu choi cac tac vu hop phap, ban co the cung cap them ngu canh ve ly do tai sao tac vu la an toan va can thiet.

shield

Bao mat la Uu tien

Anthropic da dau tu dang ke tai nguyen de lam cho Cowork an toan theo mac dinh. Cach ly VM, he thong quyen va co che an toan cung lam viec de giam thieu rui ro. Tuy nhien, khong co he thong nao la hoan hao. Luon thuc hanh can than khi cap quyen truy cap tep cho agent AI.