Commit Graph

287 Commits

Author SHA1 Message Date
Matteo Meucci ff6fc599b6 Update AITG-DAT-05_Testing_for_Data_Minimization_and_Consent.md 2025-11-05 19:43:55 +01:00
Matteo Meucci bc94636d3e Update AITG-DAT-04_Testing_for_Harmful_Content_in_Data.md 2025-11-05 19:42:07 +01:00
Matteo Meucci 7d9fd59c63 Update AITG-DAT-03_Testing_for_Dataset_Diversity_and_Coverage.md 2025-11-05 19:41:07 +01:00
Matteo Meucci b9ad6c997d Update AITG-DAT-02_Testing_for_Runtime_Exfiltration.md 2025-11-05 19:40:05 +01:00
Matteo Meucci d19e9da901 Revise testing methodology for training data exposure
Updated the testing methodology for training data exposure vulnerabilities in AI systems, detailing the setup and execution of tests for direct storage access and inference-based data extraction.
2025-11-05 19:37:28 +01:00
Matteo Meucci 8224b3486a Update ToC.md 2025-11-05 19:15:17 +01:00
Matteo Meucci 622111e547 Update AI Testing Guide Table of Contents 2025-11-05 19:11:54 +01:00
Matteo Meucci 9576d2c964 Remove section from PDFGenerator Table of Contents
Removed 'Testing Limitations and Requirements' section from the Table of Contents.
2025-11-05 19:04:27 +01:00
Matteo Meucci e32fd15c4a Remove Testing Limitations and Requirements section
Removed 'Testing Limitations and Requirements' section from the README.
2025-11-05 19:03:57 +01:00
Matteo Meucci dc53b5d478 Delete Document/content/3.0_Testing_Limitations_and_Requirements.md 2025-11-05 19:03:37 +01:00
Matteo Meucci ded151e598 Update 3.0_OWASP_AI_Testing_Guide_Framework.md 2025-11-05 19:03:10 +01:00
Matteo Meucci b3313ad11b Clean up Testing Limitations document
Removed unnecessary whitespace and next section references.
2025-11-05 19:02:15 +01:00
Matteo Meucci 3736820fc9 Consolidate appendix entries in ToC 2025-11-05 18:54:06 +01:00
Matteo Meucci eb17b24ed3 Fix section numbering in README.md 2025-11-05 18:53:26 +01:00
Matteo Meucci 0c354f6f7f Remove links from testing table entries 2025-11-05 18:49:28 +01:00
Matteo Meucci 10b753d36b Create 4.0_Domain_Specific_Testing.md 2025-11-05 18:43:55 +01:00
Matteo Meucci 03d275b64a Update links in Table of Contents for documents 2025-11-05 18:26:44 +01:00
Matteo Meucci 8fe4f60c3c Update link for Preface and Contributors section 2025-11-05 18:25:14 +01:00
Matteo Meucci 94e8c24809 Create ToC.md 2025-11-05 18:11:11 +01:00
Matteo Meucci cf46c10aa3 Update section numbering in README.md 2025-11-05 18:05:19 +01:00
Matteo Meucci b5b74f045b Merge pull request #45 from nhumblot/prompt-injection-structured-output-attack
feat: add structured output attack example with source
2025-11-05 14:51:04 +01:00
Matteo Meucci 52dd155251 Rename document for prompt disclosure testing
Updated the title of the testing document to reflect prompt disclosure.
2025-11-02 18:57:11 +01:00
Matteo Meucci 04ba8c5b43 Revise AITG-DAT-01 document for clarity and structure
Updated the document to improve structure and clarity, including sections on testing methodology, expected outputs, remediation strategies, and suggested tools.
2025-11-02 18:55:56 +01:00
Matteo Meucci b496d11a8b Revise testing document for explainability and interpretability
Updated the document to enhance clarity and detail in the explanation of testing for explainability and interpretability in AI systems. Added specific objectives, expected outputs, remediation strategies, and suggested tools.
2025-11-02 18:22:29 +01:00
Matteo Meucci 4fd6fa2000 Update AITG-APP-13_Testing_for_Over-Reliance_on_AI.md 2025-11-02 18:17:00 +01:00
Matteo Meucci 4aef9d8a69 Revise testing document for toxic output
Updated the structure and content of the testing document to improve clarity and organization, including renaming sections and enhancing remediation strategies.
2025-11-02 18:13:23 +01:00
Matteo Meucci 9c1c965948 Change headers from H3 to H2 and H4 to H3
Updated header levels for better document structure.
2025-11-02 18:06:23 +01:00
Matteo Meucci 140f236dd4 Update headings and improve test documentation 2025-11-02 18:05:53 +01:00
Matteo Meucci 6411868698 Revise section headers for testing document
Updated section headers to improve clarity and consistency in the testing document.
2025-11-02 17:47:23 +01:00
Matteo Meucci 9d01b136f8 Revise expected output for model extraction tests
Updated expected output criteria for model extraction testing, clarifying fidelity levels and defensive mechanisms.
2025-11-02 17:46:43 +01:00
Matteo Meucci f36d16964d Enhance model extraction testing documentation
Expanded testing documentation for model extraction attacks, including detailed payloads, prerequisites, and step-by-step instructions for data acquisition, surrogate model training, and evaluation.
2025-11-02 17:45:12 +01:00
Matteo Meucci 8e55e6238d Enhance embedding manipulation testing documentation
Expanded testing scenarios for embedding manipulation, including payloads and expected secure behaviors.
2025-11-02 17:28:41 +01:00
Matteo Meucci ae07885a80 Enhance documentation on embedding manipulation testing
Expanded the section on embedding manipulation to include detailed explanations of vulnerabilities, attack vectors, and testing objectives. Updated suggested tools for testing embedding robustness.
2025-11-02 17:23:25 +01:00
Matteo Meucci d34c7d8e42 Update README.md 2025-10-30 18:07:24 +01:00
Matteo Meucci ad9fa99f1e Fix links in README for AI Testing sections 2025-10-30 18:04:12 +01:00
Matteo Meucci eb899ebe44 Update table of contents in README.md 2025-10-30 18:03:02 +01:00
Matteo Meucci 736763ea47 Add AI Testing Guide objectives and methodology
This guide aims to provide a structured framework for assessing AI systems' security, targeting various roles involved in AI security and compliance. It outlines a methodology for threat modeling, mapping, and testing specific to AI applications.
2025-10-30 18:02:46 +01:00
Matteo Meucci 4c3dbfbfa1 Moved Document/content/1.1_Principles_of_AI_Testing.md 2025-10-30 18:01:41 +01:00
Matteo Meucci 64059cf00f Add OWASP AI Testing principles and lifecycle phases
This document outlines the principles of OWASP AI Testing, detailing four macro domains: Security, Privacy, Responsible AI, and Trustworthy AI Systems. It also describes the phases of the AI system lifecycle and the importance of integrating testing throughout.
2025-10-30 18:01:13 +01:00
Matteo Meucci d4573ce6cb Moved 2025-10-30 17:59:15 +01:00
Matteo Meucci f522948dfd Add OWASP AI Testing Guide and contributor list
Introduced the OWASP AI Testing Guide, outlining its purpose, methodology, and contributors.
2025-10-30 17:57:48 +01:00
Matteo Meucci 5baed52ca3 Fix link to AI Application Testing section 2025-10-30 17:53:07 +01:00
Matteo Meucci c99d2969f3 Refine testing documentation for prompt disclosure
Updated sections for clarity and consistency, including test objectives, expected outputs, and suggested tools.
2025-10-30 17:38:58 +01:00
Matteo Meucci d2b2f3b057 Refine content and headings for agentic behavior testing
Updated section headings for consistency and clarity. Revised text for better readability and precision regarding agentic behavior testing.
2025-10-30 17:22:31 +01:00
Matteo Meucci 88f15ccb7d Revise section titles for clarity in testing guidelines
Updated section titles and clarified testing instructions for unsafe outputs.
2025-10-30 17:18:32 +01:00
Matteo Meucci 8bd00636cd Revise section titles in input leakage testing doc
Updated section titles for clarity in testing documentation.
2025-10-30 17:08:58 +01:00
Matteo Meucci dac1a442f4 Revise test documentation for sensitive data leakage
Updated sections for clarity and consistency in testing documentation.
2025-10-30 17:05:34 +01:00
Matteo Meucci 1ca047f15a Update testing document for indirect prompt injection 2025-10-30 17:03:10 +01:00
Matteo Meucci 8a6445b6ae Update testing document for prompt injection techniques 2025-10-30 17:01:39 +01:00
Matteo Meucci 8c9ed7d5ce Merge pull request #51 from federicodotta/main 2025-10-28 10:46:26 +01:00