CalvinBackup/www-project-ai-testing-guide
1
0
Fork 0
mirror of https://github.com/OWASP/www-project-ai-testing-guide.git synced 2026-06-01 20:11:41 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update 2.1.1_Architectural_Mapping_of_OWASP_Threats.md

Browse Source
This commit is contained in:
Matteo Meucci
2025-06-18 11:05:15 +02:00
committed by GitHub
parent 2c755a3042
commit eed48478a9
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Document/content/2.1.1_Architectural_Mapping_of_OWASP_Threats.md
+5 -1
View File
@@ -2,7 +2,11 @@
In this chapter, we present a structured mapping of AI security threats from the OWASP Top 10 LLM Risks (2025) and the OWASP AI Exchange Threats onto a modular AI system architecture, grounded in Google’s Secure AI Framework (SAIF).
By examining the AI architecture across its four core layers, data, infrastructure, model, and application, we can visually pinpoint where threats are most likely to materialize as risk exposure, thereby enabling focused and effective security testing. Figure 2.1, titled ‘OWASP AI Threats Mapped to AI Components,’ illustrates this alignment and serves as a reference for mapping threats to the specific components within the AI system.![][image1]
By examining the AI architecture across its four core layers, data, infrastructure, model, and application, we can visually pinpoint where threats are most likely to materialize as risk exposure, thereby enabling focused and effective security testing. Figure 2.1, titled ‘OWASP AI Threats Mapped to AI Components,’ illustrates this alignment and serves as a reference for mapping threats to the specific components within the AI system.
<p align="center">
<img src="/Document/images/SAIF_Threat_Model_Diagram.png" alt="AI Architecture Threat Model" width="1200"/>
</p>
**Fig 2.1 Threat Model of OWASP Threats (LLM T10 and AI Exchange) Mapped to Impacted AI Components of a SAIF baseline architecture**