25年1月，雄狮科技AI中心负责人丁雪毅，携编号023（023：Lion-AI联合实验室-第23号网络安全实验室）前往德国法兰克福奇瑞欧洲研究院进行VSOC安全运营智能体部署测试，该智能体的成功运行也折射了奇瑞在聚焦全球汽车的作战视野中，对安全合规与创新挑战中的AI技术敏锐洞察及技术应用实力。

In January, Ding Xueyi, head of the AI Center of Lion Tech, went to European R&D center of Chery in Frankfurt, Germany, to visit Cybersecurity Laboratory No. 23 of Lion-AI Joint Laboratory, in an effort to deploy and test the VSOC cybersecurity operation agent. The successful functioning of the agent also reflects Chery's keen insight and technical competence in the deployment of AI technologies in security compliance and innovation, in face of the intense competition in the global automobile market. 

Lion-AI联合实验室

Lion-AI Joint Laboratory

一直以来，奇瑞始终秉承“安全是最大的豪华”这一理念，不断在汽车安全与合规领域深耕细作、勇于创新。为此，依托Lion-AI联合实验室平台建设网络安全实验室（编号023），整合社会优秀资源孵化安全领域的新型产品。2024年12月，雄狮科技与木卫四（北京）科技有限公司共同孵化的VSOC安全运营智能体完成产品开发及验证，该产品标志着奇瑞在汽车网络安全领域取得了进一步突破，更为奇瑞全球市场的智能网联汽车提供更为稳健、合规的安全保障及汽车智能化的竞争优势。

Adhering to the concept of "safety is the greatest luxury", Chery has been continuously devoted into the deployment and innovations in cybersecurity and compliance. To this end, Chery established the Cybersecurity Laboratory No. 23 of Lion-AI Joint Laboratory to integrate social resources to incubate new security products. In December 2024, Lion Tech completed the development and verification of the VSOC cybersecurity operation agent jointly with Callisto, which marks Chery's further breakthroughs in the field of automotive cybersecurity, and ensures Chery's competence in more robust and compliant security technologies for its IOV vehicles in the global market.

立足合规：筑牢安全运营根基

Based on Compliance: Laying a solid Foundation for Cybersecurity Operations

随着汽车行业的智能化的蓬勃发展，网络安全、数据安全法规与标准愈发严苛且不断更新（如UNECE WP.29 R155/R156、ISO/SAE 21434、GDPR、GB44495 等），雄狮科技在产品设计、研发及运营阶段深度布局合规管理及安全防护：With the booming development of the automotive intelligent industry, regulations and standards for cybersecurity and data security are becoming increasingly stringent and are constantly updating (such as UNECE WP.29 R155/R156, ISO/SAE 21434, GDPR, GB44495, etc.). Lion Tech has deeply implemented compliance management and security protection during the product design, R&D, and operation:

l  全面落实网络安全管理制度：在全球多个地区建立完善的数据采集、分析与处置流程，通过先进技术手段践行数据保护准则，满足各国法规对数据安全和隐私保护的要求。

l  Comprehensively implement cybersecurity management systems: Establish well-developed data collection, analysis, and disposal processes in multiple regions. Implement data protection guidelines through advanced technological means to meet the requirements of data security and privacy protection in various national regulations.

l  持续更新安全规范与标准：以ISO/SAE 21434为核心安全工程体系，将安全风险评估、威胁建模和事件响应嵌入产品全生命周期，保障产品始终处于行业领先水平。

l  Continuously update cybersecurity regulations and standards: Based on ISO/SAE 21434 as the core engineering system, embed risk assessment, threat modeling, and incident response into the entire product life cycle to ensure that products always remain at the leading level in the industry.

l  合规与效率并重：在全球各地建立本地化运营团队，协同部署安全运营智能体，保证全球运营标准统一化，提高事件处置效率。

l  Emphasize both compliance and efficiency: Set up local operating teams around the world, jointly deploy Cybersecurity Operation agent to ensure the standardization of global operation standards and improve the efficiency of incident handling.

奇瑞欧洲研究院

Chery's European R&D center

聚焦实际应用：升级安全运营体验

Focus on Practical Applications: Upgrade Cybersecurity Operation Experience

安全运营智能体在全球运营体系中大显身手，精准对接多语言、多地域的本地化业务需求，能够有效处理海量车辆的实时异常数据。

Cybersecurity Operation Agent works will in the global operation system. It accurately meets the localized business needs in multiple languages and regions, and effectively handle the real time abnormal data of a huge number of vehicles.

安全运营智能体数据展示

Data from Cybersecurity Operation Agent

l  多样化场景覆盖：从车载娱乐到远程车控，智能体提供7x24小时的网络安全监测，第一时间发现潜在风险，根据风险程度自动匹配处理策略；

l  Diverse Scenario Coverage: From vehicle entertainment to remote vehicle control, the intelligent agent provides all-day cybersecurity monitoring. It can detect potential risks timely and automatically match handling strategies according to the risk level.

l  智能决策支持：基于奇瑞百万级网络安全事件库，智能体已具备资深运营人员处置分析能力，对部分低风险事件自动闭环，高风险事件给出研判思路和处置建议，有效减低运营人工工作负担和培训成本。

l  Intelligent Decision Support: Based on Chery's million cybersecurity database, intelligent agent has acquired the analysis and handling capabilities of a senior operator. It can automatically finish low-risk incidents, and provides judgment ideas and handling suggestions for high-risk, effectively reducing the operational workload of manual labor and training costs.

l  自学习迭代更新：随安全事件处置经验积累，智能体能够运用自学习能力迭代事件处置能力，逐渐从运营人员成长为安全行业专家。在确保运营策略与标准的先进性，聚焦各地区独特的网络攻击态势，开拓本地化网络安全防护体系。

l  Self-learning and Iterative Updating: With experience of handling security incidents accumulates, the intelligent agent can self-learn to iterate incident-handling capabilities. It gradually grows from an operator to an expert in cybersecurity industry. By ensuring the advancement of operation strategies and standards, it focuses on the unique cyber-attack trends in various regions and develops a localized cybersecurity protection method.

创新技术赋能：使用AI打造安全基石

Empowering with Innovative Technologies: Building Safety Foundation with AI

Lion-AI联合实验室，采用最前沿的AI技术，通过智能体实现下列关键能力。

The Lion-AI Joint Laboratory adopts high-end AI technologies to achieve the following key capabilities through the intelligent agent.

l   多语言本地化适配：智能体符合奇瑞出海战略，使用大语言模型实时翻译，针对全类型的安全事件和指令实现本地化，大幅提升沟通效率；

l  Multilingual Localization Adaptation: The intelligent agent aligns with Chery's overseas expansion strategy. Using large language models for real-time translation, localizing all types of security incidents and commands, thus significantly improving communication efficiency.

安全运营智能体多语言能力展示

Demonstration of the Multilingual Capabilities of Cybersecurity Operation Agent

l  大规模数据融合：利用大数据处理架构（如Flink等）对车联网高频数据流进行实时计算，精确过滤安全噪音，经统计误报压制率达到96.3%，辅助运营人员快速聚焦真实威胁。

l  Large scale Data Fusion: By big data processing frameworks (such as Flink), conducts real-time calculations on high-frequency data streams in IoV. It can accurately filter out security noise. The false-alarm suppression rate reaches 96.3%, helping operators quickly focus on real threats.

安全运营智能体数据统计场景

Data Statistics Scenarios of Cybersecurity Operation Agent

l  端到云闭环防护：结合车端能力与云端防护平台，全面加强车辆安全事件的识别、研判与处置，形成一体化多维度安全防护。

l  End to Cloud Close-loop Protection: By integrating vehicle capabilities with the cloud protection platform, comprehensively strengthens the identification, assessment, and handling of vehicle security incidents, forming an integrated and multi-dimensional security protection system.

安全运营智能体问题处置

Problem Handling of Cybersecurity Operation Agent

着眼全球，实现安全合规与业务双赢

Forward Globally to Achieve a Win-win in Compliance and Business

奇瑞作为一家面向全球消费者和合作伙伴的汽车制造企业，在推动智能化和电动化的同时，也深知安全与合规重要性。在这一理念的指引下，安全运营智能体成为安全运营战略的重要抓手。

As an automotive manufacturing enterprise catering to global consumers and partners, Chery, while promoting intelligence and electrification, is well aware of the importance of cybersecurity and compliance. Guided by concept, Cybersecurity Operation Agent has become a crucial tool in operation strategy.

l  用户隐私与数据安全：持续加强对个人信息的合规处理，通过与云平台数据打通，智能体借助强大的分析能力，从海量车辆数据精准定位事件关联数据，严格遵循GDPR和各国本地隐私法规要求；

l  User Privacy and Data Security: Continuously strengthen the compliant handling of personal information. By connecting the cloud platform data, the intelligent agent, with powerful analytical capabilities, can accurately locate the data related to incidents from massive vehicle data, strictly following the requirements of GDPR and other local privacy regulations in various countries.

l  提升售后服务品质：通过智能体实时调度资源，快速检测并响应车辆异常状况，异常事件响应时间缩短75%，整体事件闭环周期缩短50%，有效保障车辆安全。

l  Enhancement of After-sales Service Quality: Through real-time resource scheduling of the intelligent agent, it can quickly detect and respond to vehicle anomalies. The response time to abnormal incidents has been shortened by 75%, and overall incident closure cycle has been shortened by 50%, effectively ensuring vehicle safety.

雄狮科技AI中心负责人丁雪毅（中间）与欧洲研究院院长侯小红（右二）

Ding Xueyi (middle), head of the AI Center of Lion Tech, and Hou Xiaohong (second from right), Managing Director of Chery's European R&D center

未来展望：持续创新引领行业发展

Future Prospects: Leading Industry Development through Continuous Innovation

在汽车网络安全与合规日渐严格的背景下，雄狮科技将继续加大对安全运营智能体的研发投入，探索AI、大数据与汽车网络安全的更深层次融合，为日益复杂的全球化用车环境提供更具创新性与前瞻性的安全防护解决方案。未来，雄狮科技还将携手Lion-AI联合实验室更多伙伴，共同打造覆盖汽车全价值链的网络安全生态，为全球消费者带来更安全、更舒适、更可信赖的智能出行保障。

Against the backdrop of increasingly strict automotive cybersecurity and compliance requirements, Lion Tech will continue to increase investment in Cybersecurity Operation Agent, exploring a deeper integration of AI, big data and cybersecurity, and providing more innovative and forward-looking protection solutions for increasingly complex global vehicle environment. In the future, Lion Tech will also collaborate with more partners of the Lion-AI Joint Laboratory to jointly create a cybersecurity ecosystem covering the entire automotive value chain, bringing safer, more comfortable and more reliable intelligent travel guarantees to global consumers.

LionAI实验室欢迎你的加入

Join us at LionAI Laboratory